
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: HEktD6cBVYn6vFAxZD7LD2YjypYTIh4BbYO4MJsx1Xc=
Subject key identifier: 4E:8C:90:7D:CE:B1:B6:D5:C4:5A:C5:B1:1D:68:AD:3E:B1:12:1B:47
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 0197B74569AF21CBDEC5B858E611F175F53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0575
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: 3p4rzZf1Qa8PwWzMuKJYXtUqAk+iT8NnuWgFhXLxjIU=)
2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:af:21:cb:de:c5:b8:58:e6:11:f1:75:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=4e8c907dceb1b6d5c45ac5b11d68ad3eb1121b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:56:69:7a:b3:0c:fd:2c:8f:c9:c8:fe:54:
2e:5c:1a:4e:9c:1c:e3:f2:e7:85:93:e7:43:b8:d5:
90:0c:aa:6d:6d:79:4f:4a:42:37:82:56:85:31:34:
e8:25:a0:a1:3f:43:12:85:c8:ae:b4:82:78:b1:51:
14:5f:56:fe:fd:f0:0b:c8:a2:ec:ac:5a:b1:82:14:
26:0d:9a:ce:cd:f8:c9:2e:82:29:27:f2:ed:f4:18:
b8:6f:0a:de:59:9d:39:ed:fd:76:27:c8:31:81:99:
3a:79:8e:d0:4a:2d:28:5e:20:92:ae:27:81:75:4f:
0e:80:d4:d6:98:2a:9b:98:22:29:d8:0f:67:87:33:
cc:91:fe:d8:6b:b2:ce:3f:ca:8c:3d:37:4a:1e:df:
b6:fe:15:2f:30:15:cb:1d:bb:b9:fc:96:f8:0e:81:
e7:33:35:c0:29:43:af:f4:fe:4f:4e:26:2e:f9:fc:
cc:1c:7d:92:05:60:71:56:c5:f8:27:c8:6b:65:76:
6d:cf:b1:f3:96:4b:4a:20:e9:84:c3:13:c8:77:0e:
5d:1f:7d:18:bc:63:87:81:cd:13:f0:33:a5:30:b1:
85:fa:65:6c:fe:5c:42:77:d3:a9:cb:cc:c7:50:c5:
62:3b:82:d1:5f:1e:d6:19:e7:6d:e5:76:8e:87:30:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:90:7D:CE:B1:B6:D5:C4:5A:C5:B1:1D:68:AD:3E:B1:12:1B:47
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:24:c0:b4:e7:6e:a8:1a:c3:3d:59:07:5a:b8:66:e8:06:
39:6a:26:cc:d5:8a:18:ab:0b:5b:05:1e:89:d7:9c:f6:bb:1b:
26:6d:67:6e:22:db:26:5c:1d:3e:ef:4a:1e:6c:20:22:5d:79:
59:89:98:8a:b2:b1:75:e4:02:be:91:40:38:a5:de:d4:53:2f:
8a:bb:82:b5:a9:32:1d:60:dd:bc:84:36:6f:1d:0c:d5:94:0d:
79:47:de:34:65:c7:35:24:11:7a:72:f1:9e:a9:84:69:c3:54:
bb:67:47:65:0f:33:b2:a8:89:dc:1b:4c:b5:89:6b:cf:bc:e9:
0e:b6:bc:3e:ed:d2:2f:17:b7:df:c3:93:09:42:f1:43:f4:c2:
04:eb:03:c1:27:5f:cd:41:2a:67:8e:63:41:2d:8a:59:01:30:
4c:48:04:0f:29:b7:1d:23:0c:37:8b:30:d0:94:4b:ce:40:d8:
7e:f8:88:ef:b0:be:a4:2b:73:15:aa:d8:d6:49:02:8b:60:a8:
2a:46:d7:47:30:4f:79:ad:12:59:93:be:6c:90:17:bf:4a:e1:
86:cf:b5:e8:83:84:36:42:8f:10:a5:a5:db:ad:65:6a:76:9c:
13:33:a1:52:23:8b:53:5c:18:9c:7f:ab:13:94:ae:0a:50:35:
3f:b7:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:39 2025 by rpki-client