Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: CXkEv5heyU/tMoGR1Mwxrowm+gVHEGviMmAfKWdwMnk=
Subject key identifier: 66:E5:99:4C:11:B0:F3:DF:73:2D:45:E1:31:B9:D3:F4:AD:77:EA:99
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 01984965BE230D6455EF5E8C9C8A17834564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 132C
Signing time: Sun 27 Jul 2025 01:01:01 +0000
Manifest this update: Sun 27 Jul 2025 01:01:01 +0000
Manifest next update: Mon 28 Jul 2025 01:01:01 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: 6oL3NRE6bIH/m8+plVtNaKqGmealDZjtZ9iJi4DmbjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:be:23:0d:64:55:ef:5e:8c:9c:8a:17:83:45:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jul 27 01:01:01 2025 GMT
Not After : Jul 28 01:01:01 2025 GMT
Subject: CN=66e5994c11b0f3df732d45e131b9d3f4ad77ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:1a:40:5d:0d:2c:a5:dc:99:c4:8f:77:9f:
fd:09:82:6e:8b:16:37:79:7c:95:d8:f7:5c:b5:ee:
57:dc:2f:58:55:96:18:bd:8b:14:0a:a0:28:ba:59:
a3:8e:dd:0f:53:d4:1c:cb:0a:ce:71:b5:40:18:4d:
02:64:fc:56:e8:0b:33:68:18:74:dc:90:fb:ed:d4:
10:53:f4:87:5d:db:38:03:92:d6:56:9d:ea:42:0e:
15:c6:7e:00:db:d4:32:98:0a:aa:fd:e7:67:e6:dc:
10:85:93:4d:c2:97:47:30:ee:03:32:60:07:51:0c:
d8:a4:80:ed:44:58:01:31:55:f2:bc:18:ff:e0:63:
56:d2:f6:76:31:6a:3c:44:0e:e2:21:63:6b:9e:bd:
a2:9a:69:24:a8:af:61:ba:57:a3:19:b1:94:49:9c:
75:b5:18:b3:8f:21:7f:68:49:60:04:d5:d0:2e:a4:
4c:00:74:22:4d:35:d3:19:3f:7a:97:16:0d:d0:cd:
3f:ec:4a:75:9d:25:7a:a1:97:de:bd:02:6a:10:f8:
28:86:3e:dd:4e:6f:0b:95:a7:a7:57:3c:a8:63:2f:
85:8c:7e:04:8a:8c:02:cc:3f:5c:b7:a1:46:51:82:
83:ce:d2:33:f1:ec:d3:8b:85:97:83:e8:de:dd:49:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:99:4C:11:B0:F3:DF:73:2D:45:E1:31:B9:D3:F4:AD:77:EA:99
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:d7:45:9e:42:be:31:3c:d5:56:a0:e6:c0:d5:f1:44:34:
ce:26:63:1f:45:21:88:bc:82:a1:e6:15:b7:e3:53:ff:e3:66:
eb:9e:6b:28:20:fb:05:0f:cb:cd:87:ca:0e:2f:c7:51:47:31:
74:f1:cf:d7:2a:f9:8a:12:0c:9a:54:26:ea:8f:8d:13:d0:b1:
3d:12:3f:76:25:88:da:64:18:a0:e9:48:72:d7:8b:ae:fe:f8:
fc:a9:4e:41:ca:e9:05:9d:83:10:a4:39:f9:8a:aa:94:e4:c3:
b8:35:d8:b0:1c:10:00:b7:aa:b8:e4:3e:07:63:a5:fa:28:5d:
3a:b5:bc:6f:76:a0:bf:4b:3b:d6:13:34:9b:da:bf:73:3e:ba:
65:81:49:89:16:22:fe:bb:27:42:67:e3:c9:cd:a0:12:e2:5c:
f3:c2:ae:54:29:a9:9d:53:cb:58:cb:7f:b6:c1:92:cb:f2:bd:
e7:3c:49:78:9e:73:bf:4b:9d:28:0a:56:73:1c:4e:94:c0:41:
d9:c0:2a:50:4a:75:53:71:bf:e2:2f:34:23:40:a2:71:92:fb:
4f:ec:ad:fe:79:67:57:91:35:09:ad:34:44:90:3c:36:ac:09:
26:79:ff:9e:40:58:c0:bf:aa:a4:02:61:33:cc:65:e7:43:d8:
42:0d:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:21 2025 by rpki-client