Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: K5ssYH62XYLPXgllmWFdT2HLsYmz/L4VMEgbNvFYuFQ=
Subject key identifier: 0D:1E:82:D6:4E:BA:71:F5:62:66:F5:A1:80:B4:0D:54:E9:1C:01:77
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 0197B8FCC4705E3AA6A9A25DFE8B21A1C75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0C9B
Signing time: Sun 29 Jun 2025 00:01:02 +0000
Manifest this update: Sun 29 Jun 2025 00:01:02 +0000
Manifest next update: Mon 30 Jun 2025 00:01:02 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: TwbU3vVAGwOb2HNu/XuwU8MHMGxTaDF3MDf8sZGtxWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:c4:70:5e:3a:a6:a9:a2:5d:fe:8b:21:a1:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jun 29 00:01:02 2025 GMT
Not After : Jun 30 00:01:02 2025 GMT
Subject: CN=0d1e82d64eba71f56266f5a180b40d54e91c0177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:4e:29:a4:9a:0c:95:87:86:f9:55:f0:2e:
1f:7b:7a:c1:5b:86:bd:7d:5e:cc:f1:e2:9b:e3:3b:
f0:81:d0:98:99:d0:34:90:04:4c:b5:a0:8f:93:a8:
3a:e4:8d:7c:6a:4d:73:ce:b1:1c:48:97:24:76:16:
31:62:bd:09:fc:c6:69:a6:c4:19:8b:b1:27:fd:9b:
d0:5e:2b:76:44:54:5b:96:e8:fc:9f:6d:7a:fd:dd:
91:ba:19:a0:16:2e:09:28:0f:db:41:93:ea:98:eb:
5c:7f:78:ab:28:4b:f2:e2:07:8d:2b:0c:b1:d0:d8:
59:4f:a9:bd:cc:38:44:43:02:9f:43:d4:66:4d:07:
96:04:2c:0d:aa:5b:4d:64:ec:29:e2:41:45:69:e6:
8f:98:a4:c1:4a:8c:3c:52:21:a3:7e:af:43:75:b7:
4e:4a:3e:cd:b9:1e:38:87:8c:21:29:84:a8:40:a5:
49:e8:f8:9f:30:5f:3e:a3:1f:53:60:3f:2c:db:cb:
06:40:9c:83:7f:72:ad:c6:58:a2:fa:02:ec:8b:0e:
2a:61:cb:22:28:18:47:3e:d6:29:a1:67:30:0c:5c:
6a:53:2b:63:36:00:b0:51:7b:bb:4a:cb:fa:01:d9:
49:28:b9:9f:00:0f:23:84:ac:ba:ff:f8:a0:71:99:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:82:D6:4E:BA:71:F5:62:66:F5:A1:80:B4:0D:54:E9:1C:01:77
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:41:b1:90:e1:e4:a5:6e:07:db:70:f3:99:f6:7c:7e:31:
5c:aa:73:e5:c5:47:fb:2a:6a:b4:ea:91:a1:2a:de:a1:62:3e:
ba:6d:5f:bc:5c:6e:d3:6a:72:96:43:4d:8e:82:8f:5b:39:16:
18:19:a5:9d:8a:e2:0b:f1:53:ce:d2:bd:78:2c:55:52:b5:cc:
3f:7e:8b:3a:ec:08:7e:31:0d:62:d6:3b:f3:d5:9b:e0:65:2b:
b2:4f:9c:5f:88:cd:8f:e1:a6:2f:da:b9:b2:4a:77:4e:ab:2c:
c9:5a:6c:20:aa:78:0f:99:50:8a:b7:3d:64:bf:5e:2b:d8:83:
90:03:c7:74:9c:08:aa:9a:50:7d:c0:30:8f:54:c0:2e:85:9f:
16:6b:2d:39:4c:02:bd:25:3d:fa:d0:f7:f6:63:12:fd:41:9c:
a5:e6:f8:f6:06:d5:1b:b9:6b:77:d6:c6:42:6f:23:6e:c9:6e:
b5:aa:23:88:82:85:2b:ac:15:bb:65:8c:ea:f2:45:8d:96:46:
97:84:87:05:ef:7f:bf:25:0f:d2:8b:1e:76:f0:38:72:24:af:
93:9c:9f:1a:8e:6c:d2:30:ce:96:6d:76:7b:3b:7e:6c:a8:07:
93:1f:57:1e:de:e3:87:b0:de:dc:fe:b8:71:c6:9f:1d:a8:85:
43:fd:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:10 2025 by rpki-client