Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: EJ69phRlcbI739B0LPNwuWr1SBiYMOEyvzM51Mmthfw=
Subject key identifier: 95:A8:99:E2:89:3C:53:84:B2:CB:1E:97:0B:07:88:8A:90:69:58:FD
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0197481E4EB14B788C453910FB43DCB6A772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1454
Signing time: Sat 07 Jun 2025 02:00:35 +0000
Manifest this update: Sat 07 Jun 2025 02:00:35 +0000
Manifest next update: Sun 08 Jun 2025 02:00:35 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: 8HpuNGqZl1GCpSAsXtO+RUGl0QM9QmDUK4O0k9+svHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:4e:b1:4b:78:8c:45:39:10:fb:43:dc:b6:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jun 7 02:00:35 2025 GMT
Not After : Jun 8 02:00:35 2025 GMT
Subject: CN=95a899e2893c5384b2cb1e970b07888a906958fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:86:03:8f:0b:46:c9:9c:5d:83:aa:7c:bd:
04:07:3e:c5:11:83:09:fa:a2:30:96:7b:1f:d2:14:
e5:b4:1e:58:c5:87:24:f3:03:ae:52:b9:1b:de:54:
08:8a:d8:64:7d:b4:4c:50:c2:09:a9:47:9d:f2:58:
59:a5:9b:ff:39:87:50:94:49:b9:f5:c7:a7:bc:a6:
04:81:15:2e:a4:3c:2f:34:f2:ea:0e:45:93:07:2b:
54:b2:30:53:bf:7e:fd:50:1f:ee:37:54:1c:29:96:
4e:50:ed:60:56:66:7c:4a:0e:21:eb:a0:c7:df:59:
6c:52:69:ce:22:50:f8:dd:04:e3:23:99:b3:d1:fc:
a5:a3:0f:13:64:6e:36:9c:ab:c8:94:4c:f5:7a:93:
08:27:1c:e6:ee:46:8e:c9:16:a6:08:c4:7e:56:62:
8d:30:2b:78:de:f0:28:35:a9:f0:19:fb:89:75:04:
86:27:b8:d8:01:2b:87:7e:2b:cb:04:58:e2:a3:3a:
c9:32:c1:46:a6:5c:76:52:aa:61:5d:20:11:fc:c6:
bd:0a:c4:a3:8d:3b:1e:c4:a0:b2:8e:64:d1:21:31:
69:90:14:44:0c:fc:73:c6:f3:7e:ce:40:77:57:2c:
36:0f:e0:b1:c4:91:e0:a0:ff:e4:60:01:74:42:75:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:99:E2:89:3C:53:84:B2:CB:1E:97:0B:07:88:8A:90:69:58:FD
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:f7:06:51:3c:51:25:1a:db:68:1e:c1:12:cb:d5:8f:cf:
2a:90:43:ca:1f:a4:97:73:52:96:99:2d:a5:79:50:d0:c6:ef:
5c:39:28:77:0d:f3:97:75:44:95:f6:5d:2a:db:42:6f:6a:58:
a6:a6:95:5a:ff:ab:01:1a:ce:fa:63:07:45:a6:28:24:b9:e6:
04:0a:2f:59:34:13:45:6a:00:4e:86:28:0c:64:76:d4:54:b8:
96:c6:6f:c3:da:85:8d:08:52:05:0b:cd:49:aa:a4:80:4d:d0:
ca:e8:7c:5c:18:5f:3e:e1:42:dc:99:0b:ee:15:5e:5c:e5:10:
e7:50:2f:ed:61:fc:f7:68:e0:9b:aa:8d:da:6f:ae:de:11:b0:
29:d3:a1:20:39:04:35:6b:16:2a:ad:a8:1b:4a:c0:dd:cd:63:
8f:51:06:63:5e:87:b9:0d:47:fa:18:cc:51:ab:45:f6:f7:9d:
7b:ba:61:74:61:2a:b9:a1:4d:56:ae:ba:b0:cd:b9:de:1f:4b:
36:67:ab:28:f6:9f:0c:aa:e5:47:4c:97:24:60:74:84:e9:74:
fc:b2:44:b6:3e:20:1f:e4:60:1b:7e:da:c9:83:1f:37:42:09:
09:41:d5:f5:e4:9b:04:6a:5c:0c:c1:20:f7:20:c9:e9:bb:b0:
18:fb:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:08 2025 by rpki-client