Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: U0UAFn+5XjWpsLvHh0YR0gfh2OWXmAljHoyaSYV1rw4=
Subject key identifier: A8:8C:91:12:CA:37:69:09:D0:59:3B:7C:C6:B6:AD:A7:E2:80:5B:A1
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 01974A0C8CFD887F328D6238BE81AB9D1DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0C63
Signing time: Sat 07 Jun 2025 11:00:25 +0000
Manifest this update: Sat 07 Jun 2025 11:00:25 +0000
Manifest next update: Sun 08 Jun 2025 11:00:25 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: rkZsz86BwWKr3DjbZX0eXAzMzlb9HFeAf5Bo+EX7Vxg=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8c:fd:88:7f:32:8d:62:38:be:81:ab:9d:1d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jun 7 11:00:25 2025 GMT
Not After : Jun 8 11:00:25 2025 GMT
Subject: CN=a88c9112ca376909d0593b7cc6b6ada7e2805ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:da:f4:19:fd:32:51:08:f5:39:19:c3:8d:
df:25:ce:8f:03:9d:8b:8e:f7:5e:88:8b:9c:73:65:
ca:01:d7:47:26:2f:d9:66:1d:10:e5:b9:21:64:e3:
f0:7d:0c:00:3f:44:e3:a7:7b:e4:8a:59:0f:18:29:
a5:7d:39:93:99:b5:71:7a:c2:10:e3:60:ae:42:a0:
81:b7:ce:d1:7f:dc:25:a0:34:e7:95:9e:0b:4b:71:
a1:76:9a:e1:0c:0a:68:e3:65:9c:b5:8c:d5:34:ff:
71:fc:7c:a4:bb:cd:bd:01:87:bb:76:7d:34:d7:46:
8c:6c:07:1a:7c:ba:89:3c:21:95:b1:ef:e5:11:55:
ee:9e:40:5a:b0:58:28:26:8b:04:33:ba:4a:c3:64:
0d:b6:3e:ae:e9:70:c9:2d:86:d1:de:ef:d1:47:09:
00:07:bd:f4:72:47:6d:7f:23:9e:45:6f:f9:a0:2b:
54:e2:95:ee:c9:f0:f2:2a:b5:e5:0d:c1:e1:10:ae:
0e:3f:af:55:ee:fb:7c:ea:df:03:4b:55:eb:cc:3d:
5d:d1:5f:ff:31:7b:f4:bd:43:ee:59:24:58:a5:0c:
f9:25:9e:80:00:67:39:35:22:02:69:d9:ef:c3:78:
46:1e:d2:6c:7b:0a:05:c5:d7:b6:30:c7:f5:56:b2:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8C:91:12:CA:37:69:09:D0:59:3B:7C:C6:B6:AD:A7:E2:80:5B:A1
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7d:dd:e6:dc:4c:ae:e7:af:05:22:84:f9:d6:27:66:01:0d:
b6:7f:91:b1:9d:15:9b:21:8a:3c:99:58:6d:8e:35:f2:c8:68:
fa:ec:e7:89:2a:e8:90:f4:88:da:32:14:c2:dc:03:bf:92:56:
e9:ca:38:fe:60:df:0d:a0:bc:58:87:a2:04:3c:85:08:5b:91:
e9:21:4d:32:b1:84:c0:ac:9f:45:3d:8f:98:16:18:84:e5:d7:
1b:9b:7e:8e:f1:49:a3:81:fb:3b:e4:0f:42:56:0e:71:d4:83:
ee:c1:f0:9c:32:53:74:5c:06:5c:67:ae:07:b8:a3:a9:ff:de:
d6:50:04:0f:f9:3b:ab:57:57:6e:af:d7:ea:34:6c:aa:4b:91:
f3:80:2a:6f:65:be:bf:87:9b:96:1a:62:aa:82:ad:ef:02:c8:
3e:cd:9a:58:54:8c:06:07:44:d8:3c:3f:09:28:52:9c:e6:0a:
7a:20:d6:bd:d8:9a:38:64:30:cf:fc:ef:3f:d7:2c:9e:72:47:
f3:6c:ec:72:22:d1:ee:b7:6e:9e:16:ea:d6:28:53:fd:c0:ae:
c5:c3:92:24:18:78:54:8f:b3:81:70:65:03:2f:83:9f:58:d1:
1d:2c:1c:05:c9:a6:72:2b:fb:4e:56:1d:36:5f:65:c6:98:20:
68:68:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:36:28 2025 by rpki-client