Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: ffB6NcGruX5SOJkeZBAARdTzXf4/VExYkEV9vuXxSfg=
Subject key identifier: CD:06:B4:10:A4:7D:24:CE:F9:90:5C:77:27:CB:0C:BC:2E:1E:AD:83
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 0198D54E7E8E691CCA0CD6D6085789EF1CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 095B
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: 9J9ENeDIYO+MFdZxYjcrh8eU3/QqxiU9CwpG0i0tYmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7e:8e:69:1c:ca:0c:d6:d6:08:57:89:ef:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=cd06b410a47d24cef9905c7727cb0cbc2e1ead83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:af:b0:0a:b6:fa:25:d4:3d:88:56:dd:78:
c5:9f:3c:d5:c1:ec:09:b8:6a:12:58:cf:ac:a3:1a:
ff:e1:4f:e6:5d:7d:f3:73:b0:17:86:c2:d7:db:63:
a6:64:88:48:64:19:fe:81:5e:8c:52:a6:ed:10:53:
9e:69:77:dd:9d:51:6a:32:9a:0c:af:7c:3c:92:a4:
9c:57:ca:7b:1a:0a:82:c8:a1:c9:98:a0:4e:0a:50:
94:e0:c0:a0:34:3e:9c:ca:0e:9c:b0:12:4c:e7:3b:
cb:4a:9a:53:10:82:0c:59:57:37:1a:af:14:b8:03:
fe:3f:c9:67:3a:f8:a6:42:b8:b6:a4:93:dc:ca:e3:
03:39:96:de:26:b4:bd:63:55:6e:66:b4:56:40:a8:
a2:52:66:8f:34:c7:d7:c6:3c:2e:4a:43:6b:06:d0:
45:cd:92:6c:d5:ea:77:b3:78:85:eb:d8:f3:45:41:
b4:97:94:51:d4:ad:ed:e2:7b:5d:d3:27:eb:0b:d3:
33:a6:1c:a7:1f:d5:e1:34:2e:0f:01:c8:f3:63:da:
75:3c:f5:73:65:ff:ef:af:9a:2c:97:f3:a2:cb:69:
db:81:a4:04:0f:90:7e:59:43:00:2a:14:2d:49:d0:
77:1e:a2:ba:b4:1b:ee:09:8d:91:50:18:c1:3b:fc:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:B4:10:A4:7D:24:CE:F9:90:5C:77:27:CB:0C:BC:2E:1E:AD:83
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:ad:98:cc:ec:e9:c5:e3:10:e5:dd:73:36:b2:c4:4b:6c:
32:9a:47:b7:ac:7a:97:29:5f:ea:fa:77:33:b0:90:fe:0d:de:
d4:57:8b:fb:26:dc:13:f3:c1:5f:c9:11:d1:f0:83:d3:80:97:
28:ef:5a:bc:ce:61:f6:72:9b:ef:01:e8:2d:73:c0:47:8e:00:
d3:4f:95:83:f6:2d:53:6b:40:e1:07:70:fb:86:c9:c9:52:ab:
d9:b7:cf:00:36:9e:09:90:c5:28:8e:dc:90:86:70:34:e3:82:
7d:0d:f3:e6:d6:21:0c:6e:0a:cb:04:cc:5f:23:94:52:de:fd:
cc:62:54:38:ae:4c:b5:fa:50:bd:48:c0:67:98:01:47:51:23:
b6:8c:62:2a:59:48:97:26:d8:70:06:5d:43:57:21:bd:1a:57:
69:da:8b:b8:91:fa:14:81:8d:2a:0a:07:65:b7:cc:7c:34:5d:
c4:ab:d7:f1:4b:a6:9a:94:9a:e7:9e:c7:9a:ca:8a:26:b1:3d:
9c:87:fa:6c:67:48:15:cc:ee:e1:79:28:7a:fb:d8:77:86:04:
3f:76:57:8b:a4:d4:b4:b2:9d:3f:d8:e6:ea:32:3b:cf:ff:9e:
b2:5b:55:aa:d9:76:b8:f2:b2:e1:20:36:01:80:1c:8e:85:57:
7f:b4:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:03 2025 by rpki-client