Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: cg257GbkaBcUQHbI/+uTVPXSsGeiaoRBzigfQIfSYpA=
Subject key identifier: 15:31:79:2E:74:01:C7:54:9B:B9:B6:B8:D6:2C:B9:86:4D:A8:51:59
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 0198D5834BD289D12FA2CD4C6BB3E2FFA573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 0133
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: EoNbN//8jEJCJaNeKTmb+GeDmnplyGLo3vNcOR+Xl18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4b:d2:89:d1:2f:a2:cd:4c:6b:b3:e2:ff:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=1531792e7401c7549bb9b6b8d62cb9864da85159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:6b:10:de:55:6e:87:6a:1c:e9:bc:0f:49:
0c:04:34:67:6e:22:6a:fd:04:db:66:bb:06:f3:82:
f0:1e:c1:d2:66:ae:3e:3b:7a:44:ff:b2:75:4d:c0:
99:91:9c:3e:fb:ae:23:dc:7d:77:8b:54:70:e8:09:
b2:9a:2a:ff:34:d0:d6:57:89:e8:85:8e:50:56:f8:
4b:27:8e:80:34:1f:21:f6:06:36:e1:2c:b5:4b:75:
94:96:57:3d:c9:eb:32:05:e9:69:40:29:70:9b:4a:
e5:2e:f6:68:df:6f:ae:33:81:7e:9e:be:ea:e5:4b:
cf:c5:5e:3f:8a:3d:34:ce:14:f6:86:08:6b:74:e2:
9a:33:c2:8d:fc:06:99:d3:46:e4:07:80:ae:32:13:
87:6c:19:2b:a4:0d:ea:7b:ca:2f:6b:e9:9d:9a:cc:
20:a8:bb:a2:f8:35:b4:f8:29:79:05:4c:13:62:9e:
d4:eb:de:af:16:23:22:0c:e1:52:67:58:e3:d1:a6:
86:c6:66:4e:70:e7:06:a5:a5:41:e3:46:62:c2:16:
48:86:b7:5d:de:2a:c0:d3:fb:3a:39:ec:4c:f3:39:
ab:22:53:8c:3c:9e:1b:24:58:00:4c:8a:a8:1a:2a:
b7:e0:3c:cf:92:16:fd:8f:8e:e1:4f:79:16:83:34:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:79:2E:74:01:C7:54:9B:B9:B6:B8:D6:2C:B9:86:4D:A8:51:59
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:f9:5b:82:62:f2:dc:3c:21:25:0d:16:a6:f5:bf:b3:25:
36:69:e8:9e:8a:ed:ac:28:29:0f:ca:76:ee:64:75:52:54:2d:
cc:33:5e:13:99:21:08:c3:9e:e1:25:2c:d2:c3:69:df:c1:e9:
9d:9c:d9:f9:7b:87:08:71:f9:c1:14:33:7b:46:67:5d:1d:81:
6e:ca:27:a5:1c:77:e5:71:c8:86:b8:b7:bb:90:e9:54:2f:d3:
0a:b5:ae:b7:7a:a3:91:61:9e:53:4b:a5:04:da:bc:ad:5b:8c:
ea:4d:76:af:f1:a3:9d:cf:e2:d5:d7:02:70:cc:6c:d5:a5:99:
d3:b2:35:d5:bd:89:40:19:75:6f:61:04:70:a7:f9:ef:ec:14:
a4:6d:14:c9:ff:d3:14:c1:ad:c4:4e:02:0a:09:19:22:d9:81:
29:16:dd:c5:a6:29:9e:43:4a:70:4d:0e:23:55:de:96:85:7e:
ac:ef:c8:e5:d5:d0:76:76:52:f4:fb:41:1d:e8:e6:1f:c4:2f:
bf:e1:fa:d0:f6:13:3d:bc:6d:2e:f7:2f:ec:db:9f:0d:dd:70:
bf:81:68:27:25:4f:56:e9:eb:28:f0:c8:b2:14:56:d9:33:9c:
b6:cd:0a:62:ca:01:b6:1f:93:87:47:9a:82:29:98:97:0d:60:
e1:d7:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:27 2025 by rpki-client