Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: BLpIPhTMZh03vILqE8yQ8s/SuT6v9DGqO4Rwxuteuu4=
Subject key identifier: 1B:71:8D:16:78:83:E8:C3:40:04:ED:3C:D6:E5:A6:2D:6E:2E:36:19
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 0198D4A7DCAABE87982268DE15B4190053E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 048D
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: /HvmDk8Xicd1tAcMp3X1aYY1dPsosLhEG9723lu4DvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:dc:aa:be:87:98:22:68:de:15:b4:19:00:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=1b718d167883e8c34004ed3cd6e5a62d6e2e3619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:4a:72:6b:50:1c:6d:ce:a7:34:19:85:66:
60:ae:ec:6f:36:f5:66:91:e6:3d:bf:3e:df:5a:25:
29:fd:fd:ab:5a:c3:4d:9f:89:54:5e:ce:0b:e1:2c:
2a:89:5d:1d:be:45:55:d7:7e:6a:44:86:80:ff:c5:
fd:68:57:fd:ee:fa:09:60:6e:14:cb:01:ac:e1:f6:
21:9a:ea:63:d1:65:d3:a3:3f:ab:3c:de:71:08:a6:
62:ae:3f:b0:eb:27:ea:1c:06:60:e4:43:0a:6d:b7:
8e:f3:96:c2:de:71:a8:d1:9c:fb:b2:29:68:c9:93:
b5:f6:bd:ea:70:e0:c8:94:f1:b2:35:5a:df:f1:c5:
b1:80:cc:01:90:47:4d:83:47:dc:52:f5:7b:0a:44:
56:6f:db:6d:69:08:ee:f1:c2:d4:8a:f6:77:8a:bb:
4e:1d:cc:4a:3c:d8:0b:10:d3:72:c3:7c:19:a1:51:
93:13:9f:9e:37:8f:60:60:1c:6d:87:0e:19:3c:92:
e6:5d:4d:b1:66:0e:82:ff:e0:98:93:0c:cf:b7:f1:
7c:d9:eb:51:23:fb:43:24:ff:bc:27:cf:b1:28:ff:
87:d7:48:ef:c7:1c:2a:ab:8c:1e:59:26:ff:5c:71:
4e:fd:20:59:af:68:e8:ee:df:bb:9f:51:34:91:3b:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:8D:16:78:83:E8:C3:40:04:ED:3C:D6:E5:A6:2D:6E:2E:36:19
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:a3:f7:9f:16:ab:a4:da:c5:9c:fc:d0:79:cf:79:77:ab:
85:e2:cc:20:07:35:5b:97:f3:9a:f7:3a:3a:b3:a1:50:4e:17:
fb:3c:15:47:8e:6d:71:65:8b:69:c3:5b:8a:ec:70:83:94:00:
82:03:60:d4:aa:94:fc:22:29:6a:08:08:35:86:d6:5f:b1:78:
0c:3c:12:35:3c:dc:98:76:41:2b:51:72:70:19:f6:9b:6f:75:
e9:2c:e1:e9:64:22:4e:96:ec:13:db:8c:ad:3c:65:eb:04:07:
1e:24:88:6f:e0:da:29:bc:d8:09:c6:46:da:a7:8f:43:9c:aa:
f2:0a:85:d8:54:3e:16:ac:9a:e6:73:05:04:0f:f9:bc:1c:9d:
45:1a:f3:44:c9:d2:fd:11:88:d2:e4:46:46:a2:2d:3a:74:2e:
bc:e1:91:47:a3:9e:e0:a9:7b:01:d8:1f:3b:90:cd:d5:a9:00:
5c:a8:ef:96:20:69:47:0a:e6:8c:33:ea:7d:d1:bf:75:4f:78:
9f:77:04:0d:50:7a:b6:96:6b:3e:df:e2:d6:bc:5d:24:5c:e2:
da:59:06:38:0b:6b:30:13:70:ed:32:7b:19:77:68:f3:12:f0:
99:7e:43:73:6a:6d:33:31:2d:69:13:94:2d:db:71:71:14:f3:
5b:36:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:18 2025 by rpki-client