Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: QT88Tog2rtsNxnWN9wANHAZrL3e5CJ6u/KT/IU9eIEg=
Subject key identifier: 7A:90:5D:7B:87:82:AE:03:9D:58:93:EA:A1:94:77:A1:AF:8B:94:94
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 01974CD73560086ADB89C9D8BA76CC540193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 00:01:01 +0000
Manifest this update: Sun 08 Jun 2025 00:01:01 +0000
Manifest next update: Mon 09 Jun 2025 00:01:01 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: gXQ/hEMs5y7qJ3PnfPW8NCunFmGX2qSrrfe8+8vD7jc=)
2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:35:60:08:6a:db:89:c9:d8:ba:76:cc:54:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Jun 8 00:01:01 2025 GMT
Not After : Jun 9 00:01:01 2025 GMT
Subject: CN=7a905d7b8782ae039d5893eaa19477a1af8b9494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:75:29:0c:6c:3a:68:a6:0e:37:34:f8:d9:
b1:98:b6:ca:64:99:2a:02:95:8a:e5:15:b0:74:65:
ca:4b:29:d8:20:85:b2:6c:70:42:d7:66:d8:ee:66:
18:d4:aa:2c:86:9e:73:55:b3:4a:e1:17:4e:71:49:
5d:aa:28:5e:64:cd:1b:95:71:5d:d8:4d:78:9d:c9:
da:ec:b9:ea:ca:1f:f0:dc:69:ec:c6:32:b3:ee:dd:
34:0d:b2:1c:e5:74:ed:d3:25:cb:90:33:ef:67:8a:
d5:00:3f:bf:ff:02:73:66:d6:76:bf:91:06:07:bc:
17:c5:da:82:9b:4b:f3:c6:4c:88:a5:23:9c:b2:ce:
a5:12:dc:d2:80:4a:23:67:f5:1b:0f:d4:34:ef:e8:
d8:fa:96:07:b2:fb:0a:d2:92:4e:90:ff:f3:b1:e1:
c8:9f:4b:05:c5:2a:0d:71:60:8b:61:63:74:c5:97:
d3:13:0a:b1:09:b3:a7:5d:00:90:7a:89:93:7f:63:
2a:9d:c4:58:10:29:9f:b9:7c:a4:3e:0d:fd:ea:9b:
e7:ea:44:9e:0d:b3:d8:7b:c5:15:bf:fc:be:bf:c2:
d4:17:b8:75:60:3a:1a:67:ae:fa:f8:0f:50:85:61:
23:2d:2a:28:31:69:1d:89:4a:55:59:30:16:e5:7b:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:5D:7B:87:82:AE:03:9D:58:93:EA:A1:94:77:A1:AF:8B:94:94
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:25:07:5e:c5:25:1f:df:2d:e2:dc:0f:38:db:e7:53:15:
a1:81:5a:c8:dc:fa:5f:bf:c5:4f:8e:fb:d3:88:a2:5d:9e:df:
93:e8:3b:c7:a7:c9:76:e2:3d:ba:6b:d7:0a:20:5e:1f:65:69:
38:8c:5f:d1:dc:18:18:e4:1c:dc:82:75:67:63:95:26:32:e8:
6f:5c:38:c2:de:ce:27:17:1d:83:8f:66:3f:17:57:d8:bc:40:
58:d6:31:53:81:ba:fa:6d:ec:d0:22:ce:8b:3f:e4:fa:43:03:
ba:58:24:e3:f4:04:27:9a:90:66:e5:af:04:fe:56:0b:e8:61:
bd:da:8a:df:c9:c0:e6:fa:00:e1:7e:6a:51:a3:ad:49:76:a5:
75:a0:58:41:3f:07:82:e6:6c:a2:05:5e:74:de:21:cf:38:b5:
71:95:2e:b2:96:b7:53:43:33:ee:e3:4d:86:46:40:96:88:f1:
5c:07:89:38:60:be:07:d0:29:a4:97:37:a3:80:a2:9b:28:ee:
b1:87:8b:97:ce:fc:fb:fa:7b:b8:50:1b:1b:e8:30:fe:7e:8f:
aa:fe:d1:88:6a:66:58:d6:f6:9f:28:63:77:fc:d8:6c:d8:5d:
43:7b:8a:73:10:f7:d4:a6:d8:20:b9:bc:0b:0c:f4:13:7f:84:
9b:e6:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:57:40 2025 by rpki-client