Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: RqK6awnU4XdZFh0BYrQthjNPMvnPFNSRlzQx9PzeNG4=
Subject key identifier: 20:3C:27:13:32:21:EC:10:8D:0C:A1:33:7A:8D:2D:12:0B:1E:F0:02
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0198D583974EF3BDC37BCCC0E016381B46BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 077B
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: xZt3JgZROmfCXeX4+X05Wb51+YAit35xpFtmT8VHPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:97:4e:f3:bd:c3:7b:cc:c0:e0:16:38:1b:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=203c27133221ec108d0ca1337a8d2d120b1ef002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:6e:3a:1c:46:fe:c8:85:a3:9e:99:7c:a8:
e1:a5:c1:7e:77:4a:76:dd:23:d3:12:79:47:a6:6b:
fb:9a:aa:cd:a8:f8:94:ef:a3:09:73:30:13:fd:c3:
22:36:05:4d:c7:87:48:87:9c:68:95:6e:0e:12:6a:
c6:b6:53:33:57:09:8b:08:fc:cf:c1:bd:5b:e7:b6:
9a:0c:67:d1:8a:af:4f:7a:03:3e:9c:ef:f5:94:8b:
bf:a3:fd:f4:70:7d:6b:48:c6:95:7e:b6:70:ec:7f:
1d:4b:cb:80:2f:71:93:60:f6:aa:e6:56:c9:8a:bc:
42:9d:d6:2b:fe:9e:ba:10:c0:98:89:ec:ac:68:a3:
0e:e6:d1:0d:15:8a:f6:5f:75:3e:a7:ef:c6:a0:86:
1d:cd:1b:e2:11:12:8e:87:1c:bc:a4:cf:70:6a:2e:
2a:58:2e:c6:68:40:0f:ca:0d:bc:8d:28:35:e9:7c:
61:9c:87:8f:8e:9c:4f:32:c8:44:61:10:fe:c4:d9:
ec:06:02:ca:cb:88:5c:e4:c7:9c:37:d7:c8:88:aa:
86:42:db:34:e0:c7:be:05:48:b6:5b:0a:90:df:49:
b5:fa:dd:c3:d8:5f:e6:0b:29:39:c7:2d:71:5f:b4:
d6:5b:a9:08:c2:5d:37:e7:5e:a2:80:14:e3:30:27:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:27:13:32:21:EC:10:8D:0C:A1:33:7A:8D:2D:12:0B:1E:F0:02
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6b:a1:e9:25:f0:ea:e7:6c:6b:96:87:12:4e:36:27:33:92:
e6:3d:ef:a7:62:69:3d:b6:8a:b4:89:8d:37:b3:c3:c3:a7:10:
6b:34:cf:1f:8b:8a:bc:2f:4e:c2:22:5a:4f:17:6e:c5:88:a0:
c8:5d:66:a4:42:8d:cf:82:ba:da:50:17:a5:a1:0b:38:7f:2a:
59:53:c5:67:2e:99:72:ad:c7:28:c2:ca:cc:14:f1:63:43:18:
da:f9:09:f2:ec:65:07:c7:d4:1d:32:0c:8e:dd:ed:8a:05:d3:
14:89:14:ce:00:d2:14:48:e4:ff:ed:54:06:e1:35:89:39:18:
eb:e9:5d:2f:3e:61:ec:46:0a:9d:d0:13:f1:48:1e:0e:bb:18:
50:d1:b7:78:e9:d0:2f:bf:95:72:f6:75:d5:1d:9b:78:d2:9b:
fd:31:5e:c4:ab:f0:47:64:ee:39:9f:6d:03:44:94:02:60:90:
c5:72:41:d0:9c:df:3d:05:16:6a:6e:ae:5f:29:4a:55:3b:40:
34:c2:43:22:5a:89:84:a7:4b:21:37:35:8c:07:5e:5a:19:f9:
29:81:58:97:53:29:0e:18:69:2a:f4:b6:69:10:80:28:ba:47:
c6:3b:42:62:18:3a:74:7d:f0:59:e7:e3:a1:99:fc:1d:7c:a9:
56:51:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:47 2025 by rpki-client