Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: 7EgJj+umpl1Wi5th67lJOZDPwumqakv1mqb+IXlOKZY=
Subject key identifier: 70:B4:42:62:66:AF:33:A7:7F:0F:8E:D9:BD:2B:26:5D:49:DE:88:29
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 01984965D5DF5DCF196EA92289F4EA1A3BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 05D0
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: 7QdXVLnFVcQzMvZH5S96o+J5RSAStmTQ/qnPFGSbSGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d5:df:5d:cf:19:6e:a9:22:89:f4:ea:1a:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=70b4426266af33a77f0f8ed9bd2b265d49de8829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:b6:d9:08:2f:ba:9d:b9:54:25:5e:7c:92:
a4:0f:b4:a8:73:81:34:f4:41:6e:1d:ca:f0:8d:6d:
6b:67:da:20:8f:08:9f:c5:da:44:49:63:30:c2:fa:
d1:5d:15:4b:85:08:69:58:51:a5:b7:92:a6:77:3c:
e4:ab:11:c2:57:db:8d:65:43:e3:e1:a5:6b:01:5d:
cf:c8:37:72:1b:4c:c8:24:78:d8:dc:e6:22:6b:85:
7d:d2:de:ab:01:42:b7:57:e4:77:08:3c:c7:ef:95:
fc:89:c0:0d:66:11:a5:5b:a0:f1:65:e4:e8:e2:af:
84:32:7f:ba:b2:fe:c7:f7:8b:c1:bf:c6:d4:a6:32:
e8:ce:fc:70:0a:dd:5c:31:a3:94:68:93:83:73:d0:
55:18:05:0c:b6:17:5d:9e:00:fe:83:0f:72:e4:90:
4a:94:e7:1a:81:ff:72:cd:a8:31:f3:18:16:69:30:
e6:4d:ee:a0:03:e2:2c:01:60:12:79:ee:6a:3e:a0:
bf:ff:20:1e:fb:9b:1a:ef:75:a9:72:55:68:0b:de:
1f:ce:e7:7e:5e:a6:05:50:be:96:b1:72:30:d6:d6:
b5:f2:82:c2:9f:8e:92:17:83:f1:30:5b:32:5d:f4:
11:75:51:69:88:84:84:4a:e4:41:79:48:84:30:bd:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:42:62:66:AF:33:A7:7F:0F:8E:D9:BD:2B:26:5D:49:DE:88:29
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:79:1c:7e:3f:ed:81:e4:67:bb:03:e7:f5:b3:10:ae:ad:8e:
3e:f5:7e:d4:ca:73:fa:7d:7f:56:79:09:dd:07:02:75:0e:02:
35:04:8c:57:5a:26:ef:96:03:e8:f3:e8:67:cf:1e:4c:c1:90:
98:eb:21:46:68:df:12:dc:bc:da:6d:29:25:49:88:54:71:fb:
c4:52:15:16:ff:ca:e8:3c:7e:60:48:40:b1:25:60:90:4a:eb:
f8:26:94:93:40:8b:5b:fc:43:4e:63:33:20:21:b3:96:e0:f0:
16:e1:69:c9:f6:88:d1:c3:05:6e:97:4a:fa:1e:42:c4:13:04:
31:19:03:95:f3:2d:f3:0b:3f:ca:70:f2:02:d0:57:7a:cd:76:
8d:d4:68:a4:b2:93:1f:4a:eb:eb:55:8e:d3:86:4a:59:87:0b:
c4:cf:2e:da:18:de:29:86:dc:f0:b1:13:70:0c:ac:c3:cc:31:
f7:74:f5:b3:e7:dd:ed:fe:68:e0:eb:67:99:3b:0e:86:35:67:
b9:fa:5b:ee:e9:a3:af:48:21:00:87:30:ec:a5:b7:32:22:6e:
08:d9:78:b9:c4:00:2e:95:9c:bd:de:71:0d:09:bf:f6:9c:3d:
7d:71:e0:aa:f7:05:84:60:7d:60:53:6c:62:ba:4e:22:60:31:
9a:69:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:46 2025 by rpki-client