Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: LLd0aTk5dtGO7ZsoafYIWtIFeljAU4QiOw/7ccCQHEs=
Subject key identifier: B1:F8:2E:EF:5F:E6:15:F7:E0:C8:C2:AD:68:8A:08:AC:8C:24:69:6D
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019748FA2B46374A738CB19F5DC0586B9724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0C39
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: gbki7AfVm0Mi/Ja6XoRpYdg53vNBquA9Pf5sr1cK38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2b:46:37:4a:73:8c:b1:9f:5d:c0:58:6b:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=b1f82eef5fe615f7e0c8c2ad688a08ac8c24696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:57:be:28:23:d3:39:8c:12:c3:95:2d:22:b8:
14:ac:c0:68:16:a4:be:0c:f6:05:54:61:bb:28:bf:
c7:dd:25:00:44:08:16:36:12:67:32:d0:1a:26:c1:
e9:1f:79:b2:aa:06:7c:cd:f4:90:cc:d8:f6:2d:6f:
77:1f:5a:6c:cd:a2:9a:1d:58:99:a9:73:63:23:c5:
0d:ae:d9:14:b3:be:42:a1:74:a9:85:b3:c2:82:3a:
fb:55:63:85:50:f7:50:2a:98:a5:b1:f3:29:1a:32:
74:47:0f:d9:73:94:b3:5b:95:08:77:e6:99:1a:32:
6f:38:2b:47:70:61:3d:e3:ab:0f:bb:56:fe:07:91:
41:53:63:da:18:a2:58:29:bf:87:35:8c:c1:45:dc:
cf:82:96:a4:d8:e8:ab:33:16:89:32:ae:17:4f:65:
3c:e0:ec:24:1a:a0:fc:93:fb:1c:49:73:2b:7c:fc:
b0:74:07:63:cb:81:d6:c1:14:6b:1d:7d:87:f5:fd:
12:41:28:0d:9d:40:24:74:01:26:70:d1:31:1a:78:
0f:aa:26:7e:33:4f:cf:42:5d:ab:61:00:fc:52:10:
ef:64:2c:08:2f:98:3c:0f:a0:41:e2:ae:fc:1f:4f:
ac:3a:f8:20:4a:3d:4a:3f:b7:b1:c6:17:26:41:ab:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:2E:EF:5F:E6:15:F7:E0:C8:C2:AD:68:8A:08:AC:8C:24:69:6D
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:3d:b0:c1:e9:0d:42:87:d4:8e:85:66:03:19:e5:6e:f9:
e3:9e:80:3e:f4:b2:87:6c:88:ce:21:bc:00:ee:0a:c0:a9:3b:
ba:32:86:bf:cd:e9:8d:b8:99:80:3c:1e:12:a3:a0:81:a5:bf:
aa:9e:ac:7a:51:39:c7:e2:46:86:72:01:d7:81:d9:68:cd:32:
2f:35:9f:bf:e5:bd:c0:8e:02:0d:2e:cd:b3:c7:35:b5:7c:4e:
7d:da:fd:4b:f2:3b:96:97:27:69:10:f7:28:00:3b:14:4b:e4:
f9:f6:84:8a:fc:73:67:bc:72:1b:0c:d1:5f:60:eb:b1:6c:5c:
62:1e:c5:56:7f:7a:07:b9:f3:5c:12:1e:c8:74:ff:36:ed:27:
15:7f:68:95:67:2a:48:12:a8:b0:6a:12:ef:7a:6d:1b:2b:25:
7d:f3:fb:43:7d:6f:f4:2e:3b:d2:3b:74:10:a3:92:c4:ee:a8:
a6:92:26:f0:6b:e7:38:18:29:84:0d:03:48:0f:db:83:4c:1d:
b7:e1:46:fe:5d:33:48:49:32:8b:e5:15:a0:82:b3:81:9c:7c:
16:66:10:90:f9:fb:5a:18:f8:13:53:3c:a8:80:50:ce:29:a8:
8d:c7:7c:fb:79:0c:8f:23:58:9d:82:81:a5:4a:1f:06:2a:0d:
6f:d8:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:00:22 2025 by rpki-client