Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: mOAbPBaRgLB4v2dvAtaXd0W06ds3OWrBOpzMSEHOEto=
Subject key identifier: 1C:FF:B9:B2:74:91:A1:1D:50:72:2C:99:D1:9E:82:95:05:71:1D:B2
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 01974A7A616F5053C2BB8F4E51DB08E57EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0C98
Signing time: Sat 07 Jun 2025 13:00:23 +0000
Manifest this update: Sat 07 Jun 2025 13:00:23 +0000
Manifest next update: Sun 08 Jun 2025 13:00:23 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: +7bJerIP2YZtB3GIV+6tJg/9feJ0aWdiyDmceOkRsfs=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:61:6f:50:53:c2:bb:8f:4e:51:db:08:e5:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Jun 7 13:00:23 2025 GMT
Not After : Jun 8 13:00:23 2025 GMT
Subject: CN=1cffb9b27491a11d50722c99d19e829505711db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:56:6f:70:a4:0d:4b:3d:6a:ac:34:71:89:
86:14:b9:29:81:90:0f:d5:c8:8d:95:d0:64:96:2a:
3b:f6:cc:2f:4c:fb:cf:a2:75:f9:21:08:dd:49:68:
25:ca:4d:f8:41:49:8e:61:ff:fc:d8:a1:4b:3a:a1:
5c:d4:35:bb:a5:35:b7:7b:b1:3f:5b:ad:55:5c:71:
a5:51:c4:4c:8d:bc:0f:ce:43:58:17:73:93:a1:74:
54:fd:37:e9:b7:df:47:c1:ab:2b:8d:39:ba:37:fe:
92:e5:34:98:66:ea:12:05:22:0d:b1:1d:9b:8a:d6:
88:9a:5f:0f:87:3e:3e:24:13:5d:23:04:dc:34:ed:
17:51:31:d8:4f:bc:f2:c7:7a:b5:b7:5c:7c:b4:d6:
44:1d:1d:43:ec:52:bb:67:99:4c:25:0c:e2:0e:45:
6f:37:52:86:02:dc:d5:eb:3a:3f:39:1c:99:11:c3:
b6:2a:a7:75:00:bb:44:a0:9c:85:7f:c9:5f:ae:75:
56:43:02:0a:1c:4f:ed:4c:24:f4:df:8a:a9:f3:d2:
4e:e7:97:76:14:bc:2e:49:a6:cd:4b:f1:88:8c:ac:
0b:ad:c5:3a:00:8e:94:b8:26:66:e5:78:4c:d6:24:
2d:26:09:9e:f9:46:8a:24:b0:c5:a3:7f:c9:4c:72:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:B9:B2:74:91:A1:1D:50:72:2C:99:D1:9E:82:95:05:71:1D:B2
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:e3:2d:92:d9:40:93:5c:21:7e:2a:69:4e:41:ed:cf:40:
a2:ab:60:c8:14:b6:05:4e:cf:49:ad:80:86:b6:d0:41:3a:ef:
f4:da:1e:f9:8d:f7:11:9e:3e:53:f4:7a:73:26:7b:19:43:81:
4e:a3:26:8a:92:98:29:37:b7:68:77:73:ae:66:c5:5d:ae:eb:
27:3a:d7:94:18:e0:ad:35:89:0d:ce:fa:2a:8f:1f:39:08:71:
9a:ac:a3:6c:19:a6:b8:7e:a2:13:69:ff:2b:4e:49:1c:bd:42:
f7:ea:e1:7a:d3:00:f8:e1:d9:fe:52:58:0b:e9:11:18:d2:cd:
d6:05:31:ff:33:90:8e:da:b5:86:67:e9:4e:92:cf:08:9c:b7:
f7:11:01:0e:e3:b6:23:f1:37:c9:91:78:8a:83:e7:ee:f6:3e:
28:9d:e0:f6:f3:d2:e0:c9:47:5a:ff:c5:c9:0b:d1:74:42:b4:
39:79:60:20:64:76:d9:e2:24:be:b2:5e:9c:6f:9d:61:98:e6:
a5:f2:6c:23:f5:88:aa:6f:18:b2:2f:aa:60:17:c9:e1:49:9a:
2d:b8:7d:c3:8e:d3:d3:f3:8a:61:98:2c:e8:f6:8e:b2:0a:2f:
11:fd:aa:37:3e:03:2c:28:d5:b3:b7:a1:77:20:21:08:83:b5:
d5:23:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:06 2025 by rpki-client