Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: llAfnhD3zdtSuwHSDWJHGBQ/sYC83vp050h25vO6cJw=
Subject key identifier: 5A:34:CC:8F:AB:F0:B8:D0:36:4F:3C:2B:1E:D8:70:CC:B2:D8:AD:5E
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 0197470BC7537CC60DD4A6AAA0086CC60965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 08B8
Signing time: Fri 06 Jun 2025 21:00:43 +0000
Manifest this update: Fri 06 Jun 2025 21:00:43 +0000
Manifest next update: Sat 07 Jun 2025 21:00:43 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: NKzha3AOAAKAgZnV50HgKlz2z2pgWRqTT2zIMZJlfmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c7:53:7c:c6:0d:d4:a6:aa:a0:08:6c:c6:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Jun 6 21:00:43 2025 GMT
Not After : Jun 7 21:00:43 2025 GMT
Subject: CN=5a34cc8fabf0b8d0364f3c2b1ed870ccb2d8ad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:d1:ff:49:fe:8a:d2:4d:7f:33:e8:09:88:
8c:73:59:38:22:68:d8:12:69:da:54:39:8f:e6:ba:
9c:87:8d:e0:96:3d:42:3b:fb:42:4d:a5:20:d9:98:
7c:4d:cf:fc:4f:dd:41:55:7a:0b:ad:64:71:c5:9d:
ff:31:64:26:16:d2:f0:ee:70:53:ef:f7:57:23:1d:
0d:8d:2f:ba:95:f9:86:38:09:cd:a5:a5:80:01:f5:
52:9c:53:31:57:5f:6a:87:ea:52:62:55:80:f0:7f:
e8:e9:92:48:0a:50:a1:d3:63:d7:27:28:4c:4e:71:
9d:7a:79:f7:cb:61:b4:af:66:2a:e2:a0:b0:4c:04:
66:57:5e:25:36:10:26:23:10:e1:06:f8:6f:26:cb:
8b:f1:75:d2:41:3d:e7:68:a7:5c:c6:39:b2:c5:3d:
c0:17:a4:83:e2:d5:a0:87:14:e1:ff:ad:b5:d9:ed:
6f:f5:2d:fc:28:64:33:e3:b5:b3:35:8f:05:73:fe:
55:37:9c:b0:71:3d:24:88:19:39:b8:19:fc:22:e1:
66:17:ff:8a:06:59:ab:d0:e9:7f:88:68:a4:8b:95:
72:a6:97:67:22:4b:86:fd:85:0b:56:04:95:2f:93:
86:7d:90:19:8b:c2:83:4c:f1:8a:ec:b3:45:51:ac:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:CC:8F:AB:F0:B8:D0:36:4F:3C:2B:1E:D8:70:CC:B2:D8:AD:5E
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:55:8a:ae:5d:ab:95:83:79:39:22:ff:a2:5b:16:ea:f1:
9b:45:49:54:0b:00:2a:8f:bb:cb:37:59:6d:ac:fd:fd:64:7a:
ba:2d:0a:47:d2:af:ba:98:46:cb:38:fc:05:35:b5:d0:45:eb:
e8:e0:4d:a5:dd:0e:0d:5f:fd:80:4a:28:08:7f:ec:11:4f:3e:
04:3c:b2:39:79:ce:47:ee:c8:a4:62:82:90:a8:89:d7:6c:4d:
05:25:05:25:95:e4:3c:75:0d:63:3e:a2:d4:56:22:a9:9a:a3:
40:f0:b4:1a:e3:7f:a3:56:21:7f:5e:12:e7:d8:d4:62:dd:9f:
6c:ed:c4:c2:db:b1:6b:e1:5b:5d:ff:67:74:84:86:e6:c5:e0:
13:ae:85:98:1c:5f:5b:d3:df:bc:e0:6b:0a:8d:fa:80:f1:93:
00:6d:a2:7c:90:8f:76:92:06:db:c7:ff:cf:ec:5a:a5:d5:c8:
df:6f:5e:a3:4c:e0:9f:a4:eb:50:76:59:5c:e4:92:89:c1:50:
c6:3b:39:30:dd:ef:dc:91:f0:7b:8d:16:49:b6:ac:71:6d:75:
e2:cb:11:95:98:f7:c6:7c:de:7b:4f:ab:ee:f1:e9:43:6c:07:
34:2e:0a:3c:88:56:82:e9:47:b9:42:27:9b:5a:a1:33:35:ca:
04:48:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:33 2025 by rpki-client