Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: Gly7YnwI+j/AO07PHcxxdrJnKLbl2sjLuVVHZIkZ/sw=
Subject key identifier: 7F:04:7D:64:4A:E7:84:4B:E2:35:75:D1:09:50:2B:7B:FB:59:47:39
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 019747E740C67CFFAEBF23FF1169CA859CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 1051
Signing time: Sat 07 Jun 2025 01:00:27 +0000
Manifest this update: Sat 07 Jun 2025 01:00:27 +0000
Manifest next update: Sun 08 Jun 2025 01:00:27 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: C3RiX632tnUfhE6aJRVnK/3S9VtGyjy01rNt2WNjN0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:40:c6:7c:ff:ae:bf:23:ff:11:69:ca:85:9c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Jun 7 01:00:27 2025 GMT
Not After : Jun 8 01:00:27 2025 GMT
Subject: CN=7f047d644ae7844be23575d109502b7bfb594739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:5e:79:0a:3c:e2:f7:20:2a:0c:0c:27:81:
6d:23:ee:29:ac:50:9d:c0:88:f7:21:45:59:ac:d5:
60:b7:1d:c6:13:34:3e:3b:93:69:6c:ea:33:37:31:
8b:3f:1f:cb:9f:6b:a6:4b:d7:e1:46:89:86:02:ad:
8b:08:8c:95:dc:05:23:55:f1:67:9d:81:95:8e:6b:
d7:07:de:7d:11:47:60:49:93:c1:28:c8:c0:7e:06:
d1:95:37:20:d5:ec:58:d3:e4:0e:04:67:4f:68:17:
3b:87:aa:63:4f:f1:4a:d5:26:e5:56:16:e2:89:62:
d5:8f:ec:e6:39:71:b0:e4:8f:52:04:dc:5d:56:10:
45:75:fe:a0:fc:0b:ac:e9:83:80:d2:9f:88:f2:be:
2b:44:9c:45:ce:aa:25:2e:ee:ef:d2:86:88:03:3c:
37:ec:ec:fc:63:1a:2b:ba:ff:e9:77:4b:e1:98:60:
34:75:0f:ef:91:d2:6a:06:30:fe:30:16:ac:19:36:
4f:8a:04:ba:7b:1a:44:a9:4d:04:69:5c:de:89:7b:
8d:38:73:a3:0c:2c:2b:1a:d9:57:b7:62:c4:35:ae:
91:9f:26:cd:18:aa:8b:d9:ac:ca:e5:10:27:d4:dd:
b4:65:5e:98:1f:82:09:49:de:20:53:69:ee:1f:44:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:04:7D:64:4A:E7:84:4B:E2:35:75:D1:09:50:2B:7B:FB:59:47:39
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:29:35:97:8e:03:41:05:1a:9c:1f:42:b9:94:24:57:55:
f7:11:82:cf:55:0f:2f:51:57:11:9f:68:74:83:12:21:00:18:
ea:88:5b:50:fa:fc:86:74:30:c6:4d:45:eb:94:02:13:9d:70:
00:92:1b:51:f2:38:ea:70:f2:17:87:7b:82:3b:b0:aa:7a:bd:
5f:60:17:51:87:1f:be:6a:a7:38:26:26:21:3a:48:b9:a7:e5:
0b:fe:cd:33:be:3f:8c:55:68:76:17:bb:a4:a6:39:c1:3c:fb:
09:10:28:3c:ae:54:d6:0e:fc:0f:c0:10:c2:cf:48:b7:c1:32:
46:3a:41:f2:5e:38:35:36:4e:11:7d:b7:61:59:67:1c:f2:21:
15:6a:50:ce:5f:04:dd:30:40:ec:33:1f:33:60:59:20:5b:e4:
2a:91:fa:17:5b:3d:1c:29:78:8a:6c:84:80:71:3a:14:3e:67:
25:01:b2:9c:d0:ea:bb:ab:eb:9b:d5:9b:52:ac:83:87:81:fc:
e6:cd:86:b6:d8:87:30:cb:28:a6:7e:17:0e:20:db:29:d3:0d:
49:27:cd:91:20:57:b7:8b:51:7c:5d:ca:f8:68:c0:8c:ce:a7:
c9:a2:9f:68:20:c2:bf:01:4c:68:68:ed:0c:36:e3:4c:84:bd:
59:da:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:42 2025 by rpki-client