Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: LZI0y4wq54S6M2cis4804TiFU8qk4wPci74efuMMAPc=
Subject key identifier: 32:93:86:C6:A4:60:11:CD:3E:77:2E:91:9F:56:90:F5:82:42:48:C9
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019749D5FD2130BED6943D80BD8BC7379CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 095C
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: 6PXort4Lxv1bTLKbp6Fg4Ki7HNhM1taxPAhQrK2oRRo=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fd:21:30:be:d6:94:3d:80:bd:8b:c7:37:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=329386c6a46011cd3e772e919f5690f5824248c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:7d:52:49:ec:27:78:43:9a:a6:39:d3:3f:
43:ea:bc:05:b7:6d:2d:31:bc:4f:91:1b:d7:70:c7:
23:e6:af:60:7b:db:22:b2:64:b8:4c:99:9e:08:7a:
48:75:51:1b:8a:51:f5:e6:35:8f:13:5e:8e:da:d1:
bd:ce:a0:b6:39:4a:1a:3c:73:5d:b9:53:4f:6f:a6:
22:e3:fe:80:3a:2c:2f:96:3d:c4:cb:d5:6d:29:15:
09:80:f6:cb:37:b5:12:98:c3:f9:3f:d0:43:47:f9:
78:bf:88:b9:3d:3b:55:3e:b4:03:d6:e3:30:7a:84:
d3:28:4b:34:cd:2e:95:39:9b:00:e9:3e:da:30:fa:
92:71:fd:23:95:de:5d:41:6a:13:28:43:6b:61:84:
64:8a:c0:a9:4b:5b:3e:8c:c9:13:db:30:ba:a0:44:
39:d1:f4:7a:82:fa:81:74:fc:e9:bf:42:f9:db:69:
97:c3:0e:c1:db:a9:41:53:aa:e1:82:61:7c:70:e1:
cb:9a:73:09:75:02:8e:46:02:0a:a2:96:01:a6:82:
1f:a9:d2:51:1d:f9:6e:5a:f6:ef:c1:97:22:19:bc:
a8:1e:c2:ff:0c:dc:a8:02:e5:bf:3c:89:1e:f5:20:
c1:b4:60:af:f4:ce:04:cc:ca:ba:33:79:14:8a:43:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:93:86:C6:A4:60:11:CD:3E:77:2E:91:9F:56:90:F5:82:42:48:C9
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:97:fa:79:c6:4b:f3:72:29:56:5f:14:4a:ad:c5:d4:8d:
66:2f:5b:9d:92:c4:3f:90:17:8d:a0:eb:49:45:26:e1:a5:86:
c6:6f:99:33:59:c4:3a:f7:cf:70:ba:e1:f8:68:d5:58:9b:f7:
82:36:7e:bc:15:fd:a0:24:4e:dc:8e:4b:a6:9c:c1:f6:b4:89:
ff:e6:74:c4:45:28:d6:20:63:90:7b:85:0f:88:35:0a:5b:74:
64:c7:f6:95:5e:07:7f:b9:22:9b:1d:3d:e2:d5:56:10:fc:a5:
6f:20:fb:95:b5:b6:07:43:34:a7:6f:c7:03:18:61:fe:18:1b:
c1:03:d1:8d:c5:2c:05:89:1c:b9:73:29:53:d1:dd:33:af:15:
7d:50:64:6f:b7:05:ac:32:f7:04:4d:b9:e2:11:18:84:21:50:
82:3a:f7:a8:25:7f:86:2a:43:43:da:30:b6:aa:02:c0:15:97:
1b:5f:3b:a3:1b:4b:60:d8:45:eb:ba:61:0b:f8:4d:c5:f2:35:
6f:f3:53:cd:7b:b1:e2:b9:d1:20:57:3f:89:aa:0f:56:55:b6:
06:b1:96:ad:96:c5:8a:33:7c:d7:b5:83:c1:51:ac:7a:bb:28:
39:af:43:9d:02:b6:0a:15:ae:d6:35:bd:91:e2:dd:72:29:a9:
96:51:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:18:21 2025 by rpki-client