Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: y4B06vNms70yGHcvK3TswK/0D9q+4pSzP5hrm++BGOI=
Subject key identifier: 9D:8D:1D:6B:33:66:1D:4B:A4:99:27:A4:E3:27:02:1C:79:54:18:7F
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 0197B77CAC2DEBDD0DF51F1D2A4C18351DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 08C7
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: bVvC8ZSoqpX0zO4Mt4MxO0gMcGCt+pxpLzdN+3QJb5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ac:2d:eb:dd:0d:f5:1f:1d:2a:4c:18:35:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=9d8d1d6b33661d4ba49927a4e327021c7954187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:aa:8d:ae:d2:43:e7:53:c3:8a:c4:00:95:
5e:16:04:64:29:1a:c2:22:0e:c3:65:9d:26:b3:aa:
c2:6c:7b:90:39:b4:d2:b7:2c:7c:b3:ab:17:23:cb:
b5:ea:cc:e4:6b:c7:c1:0a:5c:ad:ab:cd:ef:a8:d6:
b7:2c:b4:df:dd:a8:73:df:71:35:8d:66:c3:53:e9:
a7:8d:56:50:3c:d4:fa:91:d8:2f:20:91:01:dc:20:
e0:18:ce:ee:11:e3:6d:da:eb:41:dc:77:33:db:48:
7d:9f:bd:42:be:e0:98:c8:d6:19:fc:89:c9:dd:c9:
6f:dd:fe:cd:b8:4e:0f:ed:74:6c:88:57:5e:ad:c5:
6f:99:a6:92:4d:e2:4b:15:2e:bf:bd:05:99:23:8b:
99:b1:0f:73:c3:d0:a2:11:d4:8b:af:b7:d0:6a:5d:
41:b2:40:fd:f0:4b:80:a4:51:8d:c9:3f:3c:b7:65:
f5:0d:00:76:93:d9:13:9b:27:c4:cc:1e:da:c2:d0:
fa:7a:cb:de:db:28:96:26:97:76:44:cb:1d:0e:ea:
13:4a:f1:47:1c:34:ba:f4:89:27:5c:87:01:20:57:
73:50:04:2c:aa:f0:27:9a:c8:40:6d:af:6a:62:cc:
2c:d4:73:72:4e:7d:83:e0:4b:3c:4b:45:0a:4f:a6:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:1D:6B:33:66:1D:4B:A4:99:27:A4:E3:27:02:1C:79:54:18:7F
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:7b:8a:77:07:ce:32:a3:bc:24:db:89:c6:df:df:0a:b6:
fd:50:9e:9d:66:a2:28:f3:03:d7:92:95:32:3f:88:64:a4:1c:
f6:1c:00:f6:8b:7f:f4:fc:9c:9c:61:69:8f:82:f2:93:ad:26:
22:9e:49:3d:1a:54:49:4f:48:dc:b2:66:d1:43:fb:b9:da:3f:
f0:2f:09:ab:01:18:29:0f:7a:c8:3c:65:4c:62:98:e1:97:20:
75:e8:77:97:dd:b9:80:17:4d:60:63:14:56:07:d0:a6:7e:b1:
98:13:ab:d4:eb:2a:d6:18:30:17:e5:a7:11:f0:59:e0:7e:62:
f2:12:a0:0d:24:ff:d2:82:32:ee:dc:33:25:2b:a0:17:ad:48:
7a:f7:41:a9:43:2c:6f:dc:49:29:2b:b2:0e:54:95:7c:cf:6b:
cf:26:a2:b3:2b:56:dd:ba:b4:55:ad:0c:64:80:3b:a0:b0:5c:
79:a0:6d:f7:51:e1:76:a8:6d:80:88:88:fb:a0:4a:93:4d:40:
1b:8c:b7:f1:86:ea:5a:44:cd:f9:48:3c:ac:ba:e1:d3:34:1e:
33:b5:dd:d8:96:97:7e:64:29:3d:c1:dd:03:5c:fb:aa:65:83:
1b:79:9b:96:bc:63:9c:3f:35:c0:a0:c9:06:75:8e:9a:61:f6:
12:c4:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:36 2025 by rpki-client