
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: Qq+IpNFsV80xqnEN0KL2Shir2wXOILUsyxlIxdX85+I=
Subject key identifier: 54:8B:77:2F:BD:99:6A:71:64:3C:94:92:70:D1:E7:3B:AA:FA:4B:73
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0198530D346CDBD5A114D34C3F1ED7C18F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 11FC
Signing time: Mon 28 Jul 2025 22:00:30 +0000
Manifest this update: Mon 28 Jul 2025 22:00:30 +0000
Manifest next update: Tue 29 Jul 2025 22:00:30 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 4Qcvu+Zcc6ttztPYG24g0TNYbOdHCMQ+cYvOx/gMknQ=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:34:6c:db:d5:a1:14:d3:4c:3f:1e:d7:c1:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jul 28 22:00:30 2025 GMT
Not After : Jul 29 22:00:30 2025 GMT
Subject: CN=548b772fbd996a71643c949270d1e73baafa4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:15:af:9c:3f:55:d9:6b:3b:c6:47:e4:25:
09:99:aa:84:31:56:d2:1c:eb:79:1d:a9:55:60:c2:
94:65:77:83:c0:29:7f:f0:7d:53:5c:c6:b7:41:e2:
dd:85:5a:4f:a5:df:ec:b3:b4:17:54:88:b8:b8:f0:
c9:63:34:eb:d4:37:89:df:3e:c3:44:d4:36:7a:c4:
9c:9b:40:4a:86:54:b9:5e:97:83:15:e8:33:83:18:
e2:61:99:27:42:4d:a3:b6:c7:2c:71:41:01:68:d0:
9c:cb:88:9c:e8:08:be:7d:8e:ed:fa:ab:87:c0:3b:
e4:0d:2c:37:99:db:d4:a7:4d:78:59:9f:e3:61:ae:
b0:7d:e2:21:71:70:99:eb:41:b6:e0:b6:dd:16:ba:
76:e8:3e:85:b6:d8:d7:a7:20:8b:74:9e:d5:17:b4:
77:f2:60:98:b8:d1:68:14:ac:95:88:00:82:c6:0c:
11:c9:ff:26:c9:25:bd:8c:b2:a9:64:25:93:e8:00:
0b:59:c4:08:a6:4c:d5:3c:e2:a2:08:58:31:10:35:
60:f9:17:35:57:e5:d2:cb:1e:61:eb:3d:9d:61:3b:
17:d6:d2:69:12:b1:ab:d2:6a:21:5f:79:52:75:e6:
c3:c7:8d:c9:e2:a2:26:bc:a1:6a:80:39:43:27:0d:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:77:2F:BD:99:6A:71:64:3C:94:92:70:D1:E7:3B:AA:FA:4B:73
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:0e:40:c8:6c:18:77:fb:fc:64:e4:04:e3:68:b5:af:fe:
dc:f5:13:89:74:8f:de:1f:7d:0e:c9:dd:6a:e7:7e:07:7d:b5:
72:39:f3:bc:9b:91:ea:32:b8:9a:55:d6:5a:59:4b:0d:7b:40:
97:b5:50:2b:81:bf:97:f0:d9:0b:43:af:9e:7d:e3:a4:6f:af:
fc:d3:08:91:d7:f5:c5:62:27:df:07:d3:c2:99:d5:dc:c4:c6:
2c:78:4d:11:2a:09:03:d0:63:4f:ec:27:4e:32:7b:0e:43:bd:
1f:04:80:33:ba:43:4e:cb:08:b5:d9:57:99:03:16:18:0a:52:
f9:34:c0:3e:54:80:7a:67:04:8c:53:d2:de:32:4a:90:2d:1d:
84:07:40:7d:5b:ca:25:39:c3:32:c4:87:c2:8f:8c:71:e1:1a:
27:69:86:7c:95:93:d2:f5:d2:77:8b:67:6f:fd:ee:ef:bf:49:
31:0e:52:1f:d2:04:e8:54:08:e7:bb:44:9e:de:04:22:0d:37:
d0:43:03:10:25:98:bf:3d:58:c4:4d:d4:d5:30:26:56:4a:8a:
b7:79:e6:26:71:e4:d4:a1:6a:b0:b7:6d:28:7c:e6:a5:d5:07:
1c:45:02:f2:91:46:55:1c:4b:fc:7f:d7:1a:b3:15:18:66:c1:
ee:9b:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:38 2025 by rpki-client