Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: rMkK6hXKynRUfQMR62AEcACBRvQwcILx/2Y0vd9Gy7Q=
Subject key identifier: 35:0A:94:F7:13:35:7A:4F:42:45:C0:10:76:7A:BC:49:4D:1B:D9:CB
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0197B88F8E23058BECF024C464A79BAE07B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 06CC
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: aIupk0HXnNnYeL6rAgoC5R2zz0hUjN1GNmBo5S1uPNc=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8e:23:05:8b:ec:f0:24:c4:64:a7:9b:ae:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=350a94f713357a4f4245c010767abc494d1bd9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:52:3a:d3:b9:10:c0:56:12:c1:1c:61:ef:
a9:b5:43:e3:50:e9:b1:c2:0e:2f:79:80:9a:5f:d8:
f1:58:fd:ac:df:ea:97:dc:49:1e:a9:87:ed:a1:91:
a3:0e:d3:1e:96:7a:24:66:e8:23:ec:3c:7f:96:b3:
36:cf:a7:64:5f:b7:b0:59:f9:63:9f:5c:a2:94:d5:
0a:a5:1d:c3:a5:53:9d:5e:18:94:93:b5:df:f7:c7:
fe:05:94:17:8e:ba:f5:f7:bd:58:3f:41:83:f1:20:
eb:1c:a9:b6:d0:0e:69:9a:11:85:8b:2b:c3:e5:c0:
5f:a0:56:a2:4a:5d:8d:44:a5:28:dd:2c:ab:15:7f:
ef:47:f3:f0:0a:57:7a:74:1b:b6:ab:6e:4e:7a:e7:
53:77:73:e4:c7:1e:3d:5d:91:24:94:ff:76:8c:3d:
c8:87:49:25:ff:ef:eb:a7:ce:84:28:e9:49:e6:83:
7b:da:cd:af:33:1f:ab:01:65:e0:39:b8:94:66:10:
9d:c5:ca:ee:11:20:e3:e5:28:91:52:25:9c:23:08:
ad:1e:8b:24:2e:0a:a1:55:c4:2d:eb:51:d1:de:26:
92:be:7f:16:90:f8:16:5f:99:af:ba:7a:31:ed:20:
8d:c3:42:31:38:30:20:70:4b:4a:12:c0:f6:24:71:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:94:F7:13:35:7A:4F:42:45:C0:10:76:7A:BC:49:4D:1B:D9:CB
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:28:31:70:1f:d2:94:bb:bc:e4:9d:3e:88:6d:83:72:2e:
f4:ac:f0:0f:07:81:76:d7:eb:47:01:18:78:7b:e7:9e:20:b8:
34:82:cb:28:27:be:7e:fc:fc:a8:21:61:33:e1:55:67:bb:1c:
ea:69:db:76:16:54:7c:e4:1c:3e:72:1c:3b:c5:c3:15:f3:e0:
d6:35:14:d6:4c:3a:d0:95:67:3f:a7:77:61:d0:5c:a5:f4:28:
d8:33:ee:9d:c4:b5:cd:bf:cb:e8:94:7c:57:60:c6:00:24:67:
c6:4b:7a:ed:b0:20:c7:90:e1:0c:71:3a:88:c5:97:df:3f:8f:
ee:35:22:79:b5:08:8f:39:1e:33:e8:3f:57:6e:8a:43:84:fb:
ac:90:31:09:99:b1:71:5e:8a:e1:34:7d:39:7b:97:69:21:73:
b5:73:e4:37:6e:1d:85:e9:87:f3:d2:6f:53:1f:40:f3:7b:83:
81:a3:0a:ac:43:4d:e8:fd:6e:28:21:a5:25:34:7c:a5:6d:a6:
82:c7:7b:a2:22:81:04:a9:24:66:94:13:2a:d0:c1:78:01:ca:
be:46:29:83:9f:22:ed:f9:41:d8:57:b8:56:af:06:fe:83:30:
33:7a:38:4f:75:bf:53:5b:53:cd:89:7d:b5:ee:18:31:e5:c0:
03:7c:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:40 2025 by rpki-client