Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: sYwx7C4lr9le8DdaGLT9uf57zi8gLhe5LVx3T/fDQW4=
Subject key identifier: 49:B7:9B:64:96:79:78:F3:32:72:D2:6E:18:3D:5F:C7:05:AA:AC:CB
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 0198D6CD15C1900C08A302316B15AE8D7009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 12:00:21 +0000
Manifest this update: Sat 23 Aug 2025 12:00:21 +0000
Manifest next update: Sun 24 Aug 2025 12:00:21 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: 1Jusibca6AtXWzdca1Sq3HlJt8iTMe5G+IXE1DRmdtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:15:c1:90:0c:08:a3:02:31:6b:15:ae:8d:70:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Aug 23 12:00:21 2025 GMT
Not After : Aug 24 12:00:21 2025 GMT
Subject: CN=49b79b64967978f33272d26e183d5fc705aaaccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:cf:95:ce:ee:eb:48:6c:6f:68:b6:1f:f1:
20:61:be:7a:99:bf:33:d1:31:ac:ff:5a:c2:b3:ad:
1a:5d:82:07:82:63:73:4b:cd:b9:b5:60:ef:66:3e:
89:3e:f9:2f:7b:40:75:51:ea:88:b6:0f:df:0b:61:
ee:ce:69:e5:60:dc:fb:5e:9a:97:5f:f7:43:c3:6a:
4b:a1:69:39:16:34:01:23:72:ad:ca:c4:b9:e4:ab:
da:c9:bc:d3:e9:43:e4:02:b4:ba:52:c7:08:e0:48:
33:e4:fe:9a:ad:c1:87:f2:bd:68:20:38:93:9e:16:
da:13:46:d9:82:9a:87:14:3e:c1:5b:af:7a:b2:8b:
d1:34:53:93:03:d4:68:f0:ad:8f:9a:dc:02:e3:fa:
2a:fe:e7:ae:f2:31:1e:57:ac:2c:f2:1a:38:60:eb:
73:fd:fc:11:34:4d:82:4b:63:d3:88:f3:b0:a4:01:
ff:90:53:f1:48:0c:77:ab:bb:d9:d3:64:2f:74:68:
9d:2b:67:f8:36:24:3a:36:04:76:00:a5:65:6a:47:
fa:d0:a7:bc:83:e6:c6:b1:ee:68:3b:06:a5:9b:e0:
70:fa:bd:b1:d9:e2:bd:cf:24:e3:7b:4a:54:d6:de:
a7:e0:2e:7f:9e:e0:6d:ce:87:ac:b2:d3:69:60:9a:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:9B:64:96:79:78:F3:32:72:D2:6E:18:3D:5F:C7:05:AA:AC:CB
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:95:f9:6e:a7:3a:c4:ad:b9:a8:7d:0b:a7:12:06:e3:16:20:
19:2a:84:3b:0d:e0:8a:aa:be:01:8f:af:eb:b9:46:59:69:d6:
7a:97:ec:6e:19:a7:8b:40:05:1e:25:dd:69:cd:a8:da:74:b6:
df:d5:bb:3f:a1:9f:55:2d:52:01:9c:a4:00:4d:81:29:8f:a1:
3f:d2:ad:31:96:78:c3:45:21:97:74:7f:c8:62:7a:9f:3d:b9:
41:b5:cd:79:07:6f:7e:df:55:4c:2b:a4:26:dc:2e:f7:4b:19:
3c:6e:26:be:83:56:e4:cf:d4:ac:71:e4:a9:56:50:f3:33:31:
1a:a5:bf:98:de:08:b2:fb:52:ac:d7:dd:1a:b2:b7:80:c4:b0:
fb:be:ac:f4:cf:50:57:12:ce:19:6c:60:00:07:43:b6:0c:b2:
7c:26:b1:ee:11:1f:2d:d6:40:6d:3b:17:d4:07:ea:3f:83:c7:
e5:a0:ec:f7:3a:45:33:b2:df:16:df:09:1a:bb:d8:56:5a:3c:
75:be:4e:cb:0b:21:52:88:3a:a9:06:a3:e3:a1:21:23:cb:5b:
f7:df:61:f0:a1:e6:d1:92:a7:8b:e5:51:5d:f3:67:76:97:95:
44:e0:8b:d8:06:0e:83:07:b1:6d:db:51:29:43:a1:48:18:d6:
2a:14:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:54 2025 by rpki-client