Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: jwP9H6MQX1nm0Xrt0MmQGeDoteVQ1XNWBK6pnXm4tj0=
Subject key identifier: 4C:77:B5:36:8E:36:8C:20:C3:05:9E:2D:49:6E:C4:4E:19:8C:04:0A
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 019894EE0C2DEC49A2208CCAA7B93DE6FE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 046C
Signing time: Sun 10 Aug 2025 17:01:25 +0000
Manifest this update: Sun 10 Aug 2025 17:01:25 +0000
Manifest next update: Mon 11 Aug 2025 17:01:25 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: MGKDguKho5qpfJf3MB5r3Ulyx9M+8yToGrBDDmk5MUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ee:0c:2d:ec:49:a2:20:8c:ca:a7:b9:3d:e6:fe:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Aug 10 17:01:25 2025 GMT
Not After : Aug 11 17:01:25 2025 GMT
Subject: CN=4c77b5368e368c20c3059e2d496ec44e198c040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:f7:12:dc:04:35:8c:64:af:8c:86:44:ee:
e7:15:4e:34:27:8a:23:29:54:8f:4a:d7:25:3e:fa:
05:5e:56:75:f6:b9:47:4d:a8:52:4c:ec:f9:30:51:
a0:fa:13:b9:b1:ae:a8:02:69:e3:fa:8b:d3:97:5c:
ba:7d:dd:4a:df:15:a6:a3:8c:3d:e2:d5:fe:b9:2f:
56:8b:a8:a3:fe:77:23:06:dc:61:01:56:09:41:93:
ae:be:66:1b:09:f2:2c:05:bb:84:e0:59:18:0a:32:
68:77:4c:a9:49:cf:d5:bd:49:67:f4:83:c7:4b:e9:
c4:b8:25:ee:9f:62:4f:ef:11:98:38:dd:9e:f7:75:
ce:bc:93:d1:17:7c:a2:c0:4e:f3:1a:bc:e4:bd:8b:
c0:ed:b1:ae:26:cc:42:49:0c:b9:f8:2c:3a:c2:e1:
30:4e:1b:7a:21:7d:e0:d0:61:3b:ee:06:a9:4c:2e:
a4:e3:18:41:ef:fa:61:ea:3d:c9:b9:ff:e6:13:8c:
59:50:f6:50:09:9a:ee:eb:b7:ac:37:f3:f3:8c:42:
3f:4b:56:47:96:4e:52:c2:66:ce:d7:e7:0f:80:52:
78:e6:d5:e2:af:9c:b2:36:bd:dc:29:9e:88:d2:6a:
0a:1b:db:b2:fa:72:82:04:18:af:82:a7:ea:54:5f:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:B5:36:8E:36:8C:20:C3:05:9E:2D:49:6E:C4:4E:19:8C:04:0A
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:92:c7:e9:e2:0d:d7:3a:83:9a:5b:3d:ae:3e:a4:24:50:
46:47:f3:17:db:b0:b1:24:dc:05:8a:b9:f3:ed:35:09:93:24:
96:63:a8:1c:a7:fb:22:15:81:f5:b7:1d:81:c5:f1:0a:b1:19:
49:ea:ce:e4:61:d4:ff:de:02:30:ae:9d:7a:84:92:29:6f:1f:
2b:82:d0:cb:d6:05:70:da:16:36:bc:b5:22:1d:56:78:e4:12:
17:bb:4c:d2:c5:97:c1:e1:d3:2c:8a:4e:cd:68:20:7d:04:9e:
24:89:b7:79:68:f5:e0:f3:36:b3:4d:f6:f9:af:71:f3:a6:31:
a2:d4:f0:89:41:e7:c8:5e:d0:15:dc:7c:32:15:65:b6:98:57:
04:4d:b8:b6:e0:40:1f:f1:3e:f8:90:14:d1:8b:bd:eb:b0:44:
2d:79:1a:93:9f:44:9b:fe:52:a7:3b:09:7d:a9:ea:d5:09:fc:
ef:a2:bb:c1:58:f1:11:3d:d8:a8:eb:9b:2b:b5:37:40:ac:da:
6b:ab:e2:c3:3c:1b:37:02:9f:74:cf:29:57:be:2e:a8:e9:0c:
a2:cc:fb:33:d6:dc:e6:59:c1:da:65:23:0e:a9:21:bb:ad:92:
78:c0:da:b7:7c:9c:dd:21:b8:7d:75:a1:1b:29:55:ef:03:4b:
2b:81:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:47 2025 by rpki-client