Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: wWOYVOJ91avMHZ2uop3/DaIqJKcdqjyg/kigSp8JHUg=
Subject key identifier: CA:CA:AD:0F:82:06:1B:69:5F:25:10:A3:D1:7A:D5:F1:DE:1B:AD:68
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 0198D47333C2165DCAF551449769EB6851D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 018D
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: V85v5/c1OkmA8WpqgeWWze2PuQCsapwv9V5UzaUs9J4=)
2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:33:c2:16:5d:ca:f5:51:44:97:69:eb:68:51:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=cacaad0f82061b695f2510a3d17ad5f1de1bad68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:7b:d0:91:34:dc:24:b0:6f:df:6a:dd:03:
04:03:b6:6e:85:13:6f:e2:a2:bf:ba:e8:c1:58:99:
20:a5:8a:08:cf:4d:63:7e:6b:c0:89:a0:4a:30:8e:
4e:44:a5:8c:0c:67:2b:ca:bc:f2:0d:7d:08:95:71:
f9:ca:0b:1f:43:21:0d:aa:a1:26:23:4a:f7:22:ca:
84:a7:42:60:d1:fb:e8:b5:b4:77:97:04:85:01:6f:
56:23:46:17:fa:bf:fd:b6:10:29:b9:86:99:46:56:
ee:50:e9:56:0f:12:6e:58:0a:4c:b6:47:c2:58:88:
df:10:7d:a1:8b:da:0f:0c:4f:92:25:7f:f6:a8:64:
77:b7:f1:b5:88:d0:f5:0b:ee:e8:f1:f9:3d:fc:1c:
34:21:87:db:db:75:d6:99:71:b2:c2:04:ce:a4:27:
79:26:6c:a1:26:cc:a5:41:c4:ac:a7:02:1d:67:87:
6b:04:ec:4d:36:f1:c9:31:7f:46:f3:41:66:63:92:
f6:60:47:94:4c:7a:1e:c3:cb:d0:de:c2:ed:4b:12:
82:c0:53:7a:80:51:57:f1:6f:4d:40:b1:4d:41:a3:
66:31:73:5b:eb:0c:6b:30:6b:de:e1:ab:a4:e9:31:
27:52:e7:35:db:ab:15:37:0f:42:03:37:64:bb:2d:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:AD:0F:82:06:1B:69:5F:25:10:A3:D1:7A:D5:F1:DE:1B:AD:68
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fd:40:e8:37:df:55:9f:b4:83:02:e3:82:19:cc:67:a0:70:
38:8c:31:5c:de:1f:1a:3a:4b:18:04:2f:f2:fd:4d:a9:7f:e5:
a9:76:53:fb:b2:79:f6:f4:a2:2a:e2:da:0a:79:84:c7:a5:ae:
e5:45:a1:7b:1e:80:2a:08:0a:19:b7:d4:a5:9c:fa:d1:dd:6f:
29:ca:63:4d:be:3c:ec:87:97:80:18:2b:62:f5:32:2f:56:d6:
68:e2:76:16:2a:d5:20:f6:0c:c9:4e:85:e9:4a:8a:eb:70:33:
29:f7:7b:d2:50:68:67:65:0c:5a:07:f2:df:21:76:e7:cf:2c:
66:d5:b4:36:f7:92:50:62:a3:53:2f:dc:fa:c4:9b:62:06:5c:
c3:46:e5:55:8d:72:38:53:91:d5:18:01:cd:b3:a2:c9:3f:f2:
d5:c9:80:22:aa:64:c3:90:c6:19:80:d9:d4:a6:8b:d7:d3:dd:
16:2b:8a:11:9b:9e:09:4d:a6:f2:b4:d2:2e:36:f1:a0:82:fc:
57:19:9f:f6:7f:b1:13:64:d9:fe:a7:da:15:50:6d:4c:d1:aa:
9e:36:a8:fe:2a:3c:3e:3d:f0:63:fc:ff:bb:a4:78:b8:1d:17:
af:81:e3:80:44:92:01:8a:57:45:02:19:fd:f7:2c:c4:4f:da:
59:a0:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:40 2025 by rpki-client