Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: hBvzs0M2iHIpIR5s4mf8RU2axdbfMa9XiiVBMwoirjE=
Subject key identifier: D2:2B:03:59:E3:D5:6C:DC:B9:8E:2C:CF:00:FA:70:2F:5B:2D:1D:43
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 0196C6157E8CC977B77AF44DE924CAD516B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 084A
Signing time: Mon 12 May 2025 20:00:19 +0000
Manifest this update: Mon 12 May 2025 20:00:19 +0000
Manifest next update: Tue 13 May 2025 20:00:19 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: NMzhLPRQL28+Nipq8VHvHoWtXg5vnPPvgnZI1JesCKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:7e:8c:c9:77:b7:7a:f4:4d:e9:24:ca:d5:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: May 12 20:00:19 2025 GMT
Not After : May 13 20:00:19 2025 GMT
Subject: CN=d22b0359e3d56cdcb98e2ccf00fa702f5b2d1d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:7a:0c:e3:e1:bd:61:fa:3d:e8:48:c9:ec:
b1:80:8d:d2:03:46:e8:cf:cf:f6:5e:0e:9b:71:3b:
88:4b:8e:5e:32:87:c0:f6:b9:87:f0:eb:98:79:c8:
a7:d5:6f:1f:06:14:75:e6:1e:58:21:55:74:2e:d7:
5c:e8:54:f6:69:49:ec:32:4a:bf:4b:d8:f1:b6:a1:
08:8d:e7:bd:91:bc:23:ea:fc:74:5f:17:b5:38:28:
ae:15:a5:ba:aa:c6:04:fd:7f:4f:0e:92:ac:c1:32:
23:5f:47:1d:a3:70:0c:a4:a5:76:ce:3d:26:a1:20:
d8:68:24:64:1a:f0:13:e7:88:17:fa:7f:f4:b2:d3:
33:81:da:fc:8a:63:52:f3:6f:ab:a4:ce:bc:da:2d:
1e:54:12:c0:cb:eb:00:cd:21:72:a3:18:0e:03:76:
46:2d:a1:b2:36:3b:55:b2:90:0c:5b:9b:54:1c:6e:
18:b4:a5:4f:08:d0:23:7c:fe:35:b4:94:d1:d5:71:
9a:87:78:84:3f:07:7b:8f:db:db:01:e7:09:5a:6b:
4b:3f:4d:73:e8:5e:19:80:b0:b0:b1:c9:40:b0:56:
63:e1:9a:47:31:07:27:f6:d4:8a:0f:bc:59:93:d2:
cf:d0:15:b4:c8:83:43:f0:d5:34:40:82:a5:48:85:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:03:59:E3:D5:6C:DC:B9:8E:2C:CF:00:FA:70:2F:5B:2D:1D:43
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:12:a5:5e:0d:da:91:38:49:4a:f1:11:46:5b:b4:14:c5:
b2:e4:13:00:71:99:83:5e:71:79:90:61:bb:b9:ca:c1:1a:38:
e8:83:cd:0d:5c:79:5d:93:33:2e:f3:d4:f5:88:1e:a5:70:08:
6a:4c:b3:3b:6f:d1:39:68:b1:17:4e:f6:6e:b7:3c:9f:8f:e4:
a2:56:c7:29:36:3e:fb:1a:49:32:98:97:16:5b:52:af:41:3b:
e9:c3:82:1c:73:92:7a:19:ae:2c:fa:c2:9f:4e:47:ed:21:6a:
58:19:5a:8c:7a:ed:27:a9:fc:85:b0:88:f1:d2:72:b8:74:29:
d6:7a:6d:3f:5c:93:02:e0:9c:05:29:16:fa:13:67:85:e5:fc:
76:2e:36:05:e0:4a:ea:24:21:74:d2:05:89:9b:40:af:a0:20:
9e:7c:04:10:7c:e9:e2:0c:a4:06:b0:60:3c:51:71:c3:cf:8d:
b7:6b:b8:98:62:4e:85:37:18:1f:ef:f6:20:18:6e:38:ad:d6:
d9:ff:6a:11:b9:02:26:76:5b:c8:92:92:47:a9:dc:e0:2a:da:
bb:4f:ca:37:94:b0:27:ae:7c:6d:70:39:c9:ea:a5:0e:46:ac:
2c:44:75:38:ce:50:bf:84:66:43:d9:e2:5c:fa:df:f5:ed:11:
a6:4a:0a:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbGFX6MyXe3evRN6STK1Ra2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2ZhNDdkYzA4MjUyZTg1NDg2NWRkOGU1MjhjZmY4NGVl
NjM2OWMwHhcNMjUwNTEyMjAwMDE5WhcNMjUwNTEzMjAwMDE5WjAzMTEwLwYDVQQD
EyhkMjJiMDM1OWUzZDU2Y2RjYjk4ZTJjY2YwMGZhNzAyZjViMmQxZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokR6DOPhvWH6PehIyeyxgI3SA0bo
z8/2Xg6bcTuIS45eMofA9rmH8OuYecin1W8fBhR15h5YIVV0Ltdc6FT2aUnsMkq/
S9jxtqEIjee9kbwj6vx0Xxe1OCiuFaW6qsYE/X9PDpKswTIjX0cdo3AMpKV2zj0m
oSDYaCRkGvAT54gX+n/0stMzgdr8imNS82+rpM682i0eVBLAy+sAzSFyoxgOA3ZG
LaGyNjtVspAMW5tUHG4YtKVPCNAjfP41tJTR1XGah3iEPwd7j9vbAecJWmtLP01z
6F4ZgLCwsclAsFZj4ZpHMQcn9tSKD7xZk9LP0BW0yIND8NU0QIKlSIUxlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNIrA1nj1WzcuY4szwD6cC9bLR1DMB8GA1UdIwQY
MBaAFPjPpH3AglLoVIZd2OUoz/hO5jacMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NLWtmY0NDVXVoVWhsM1k1U2pQLUU3bU5wdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNGQ0MDBhLWY3NzktNDcwNC1iMTEx
LWNhOGQ3ZDhmYjljMS8xLzEtTS1rZmNDQ1V1aFVobDNZNVNqUC1FN21OcHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhLzRkNDAwYS1mNzc5LTQ3MDQtYjExMS1jYThkN2Q4ZmI5
YzEvMS8xLU0ta2ZjQ0NVdWhVaGwzWTVTalAtRTdtTnB3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv0S
pV4N2pE4SUrxEUZbtBTFsuQTAHGZg15xeZBhu7nKwRo46IPNDVx5XZMzLvPU9Yge
pXAIakyzO2/ROWixF072brc8n4/kolbHKTY++xpJMpiXFltSr0E76cOCHHOSehmu
LPrCn05H7SFqWBlajHrtJ6n8hbCI8dJyuHQp1nptP1yTAuCcBSkW+hNnheX8di42
BeBK6iQhdNIFiZtAr6AgnnwEEHzp4gykBrBgPFFxw8+Nt2u4mGJOhTcYH+/2IBhu
OK3W2f9qEbkCJnZbyJKSR6nc4Crau0/KN5SwJ658bXA5yeqlDkasLER1OM5Qv4Rm
Q9niXPrf9e0RpkoK8g==
-----END CERTIFICATE-----
Generated at Tue May 13 00:24:56 2025 by rpki-client