Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: YGu3p3OZKOQMj0N/5O9kQcmWDB6TXbA65SqHuCVcIpk=
Subject key identifier: D9:14:3C:48:E1:39:65:A6:EC:20:C1:E7:1D:E5:B5:5E:D3:DB:92:B4
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019748FAA76B8CB57E4034259C2892285269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0FE1
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: B5qAWesrhf7OapDPfeN7nFK6fFItICosL6DJWun/1eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a7:6b:8c:b5:7e:40:34:25:9c:28:92:28:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=d9143c48e13965a6ec20c1e71de5b55ed3db92b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:52:58:2e:71:c6:9f:39:1d:d5:dc:2b:db:
5b:93:aa:92:5e:6f:97:7b:69:bf:3a:50:2a:ca:9e:
bd:14:82:99:b6:42:ac:3f:4d:de:d5:ef:22:7b:59:
8e:2c:5c:6d:41:1d:56:db:bf:c5:ef:2a:f0:45:30:
95:ae:ca:8c:4d:ae:af:e9:d1:73:77:cf:c9:3b:5c:
5b:8e:76:9f:9e:f9:56:1e:f0:05:68:2f:d6:93:a4:
75:c8:e2:4e:5d:a9:36:79:f4:a4:6a:4e:48:52:a2:
e4:da:33:4e:39:6b:24:3a:f3:45:92:19:4f:68:43:
20:a5:4f:ca:58:5d:4b:9c:05:64:06:56:95:22:92:
a7:fc:f6:fb:89:ee:fc:1d:bf:a6:f4:e9:31:9e:1e:
b5:1d:95:41:2a:dd:ca:05:6a:cc:0a:bd:b0:58:15:
ac:fc:8f:22:a5:8c:5c:a1:2d:70:ba:f9:6f:04:f1:
11:c7:c4:38:68:99:2a:8d:36:b7:93:72:b6:1c:dd:
42:db:63:cb:46:ba:cc:bf:f0:fe:f5:44:a3:1f:95:
4a:fc:1c:c5:a9:5e:b0:a5:2f:88:be:04:74:9c:cf:
5e:97:bc:8e:48:e1:ff:f7:2c:0d:15:15:ed:18:fd:
21:b9:32:35:f8:9d:4c:0a:f4:bf:48:0d:10:b7:de:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:3C:48:E1:39:65:A6:EC:20:C1:E7:1D:E5:B5:5E:D3:DB:92:B4
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:38:5b:c2:b6:33:4a:ec:9e:f5:54:53:97:e0:96:de:62:d8:
b5:07:56:02:e4:50:d2:fb:b9:ed:68:69:c2:42:e8:c9:27:c0:
be:4c:f7:5f:3e:9c:2a:71:11:96:34:c5:a0:41:36:fb:cc:ea:
6d:35:e4:ab:d6:cd:10:18:8f:02:86:d4:3d:4f:08:e6:1a:6c:
ff:3f:89:7b:51:a2:a5:e8:35:78:c5:72:0a:c5:df:c7:19:e9:
6a:6f:d9:6d:4e:5f:34:28:b2:04:6f:11:dd:e7:a1:8a:34:05:
5e:c4:b6:f7:d7:21:54:f8:9d:36:40:3c:aa:95:9a:76:44:5c:
7c:e6:63:0d:98:7e:aa:e2:9f:43:8b:f5:e0:61:44:ca:f3:85:
0f:3d:78:10:1a:00:d4:a8:21:75:cd:cd:99:3e:15:d1:e2:94:
cf:23:4c:6a:b3:39:fe:89:79:5a:5b:5a:09:7c:fa:ca:7b:60:
c0:8a:6d:7f:1b:7e:1d:2d:e7:7b:69:63:a3:d0:3c:e6:00:7e:
f3:e1:c7:2a:58:63:0c:bf:4b:0e:2d:28:31:2f:7b:17:4b:b0:
66:f8:ba:29:6f:0a:69:52:d7:9a:5d:2a:52:79:2c:cd:6b:16:
fa:31:be:33:a1:b6:dc:ee:29:ba:1e:49:58:51:46:76:06:a8:
70:e0:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:01:10 2025 by rpki-client