
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: t0vnGvLKTpt12k+45RcNFi71QluYpBBpFfaoBs2BPgA=
Subject key identifier: 3D:8D:E6:03:8A:A0:88:E0:99:F7:22:66:F5:79:F9:38:82:50:16:34
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0197586DCB9E10E6D79E2F2AB9F654913BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 1507
Signing time: Tue 10 Jun 2025 06:01:19 +0000
Manifest this update: Tue 10 Jun 2025 06:01:19 +0000
Manifest next update: Wed 11 Jun 2025 06:01:19 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: fkduqzauTmiJtuGk/1omw6oAXVWEh0rlZbY/OHspkaY=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:cb:9e:10:e6:d7:9e:2f:2a:b9:f6:54:91:3b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Jun 10 06:01:19 2025 GMT
Not After : Jun 11 06:01:19 2025 GMT
Subject: CN=3d8de6038aa088e099f72266f579f93882501634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:1e:d3:e1:65:60:25:39:80:2d:ea:c2:92:
3c:37:33:56:fa:62:48:11:b1:ab:5c:e9:c2:1d:cd:
a2:03:57:43:e4:a2:87:9b:da:ef:d7:74:d1:1a:c2:
20:14:20:e7:89:b6:a0:ed:c0:32:1e:3f:5f:56:13:
82:90:ec:1b:01:3d:ae:5a:d2:bb:74:ba:fa:03:7d:
6a:67:99:e6:7c:4c:bb:3f:2c:0e:48:ce:0e:c6:9d:
95:05:14:49:78:41:c8:23:fb:d2:12:d0:22:7f:a5:
8b:26:5a:72:67:7b:94:bb:fc:b1:38:18:bb:ca:ca:
0c:0e:b3:c2:54:e8:31:94:d8:ba:6d:6d:6a:f8:88:
ca:fd:ce:5f:24:cd:ba:7a:7b:3d:57:da:b4:65:26:
80:e5:bf:d2:14:41:a0:6d:4b:f3:ea:7c:27:9f:a5:
0c:2d:a9:6b:87:09:c5:b5:97:9e:99:c1:c6:c2:51:
42:f9:52:8c:b8:f2:5a:21:e0:d6:57:b8:90:33:11:
76:8b:11:52:ac:f7:09:0f:cd:1c:41:18:c8:87:09:
8a:4e:ef:d6:5c:4c:df:2d:74:d8:4d:52:3a:98:e0:
99:00:d4:6a:5e:8a:66:f5:04:8e:ae:05:30:c8:bd:
20:e0:63:42:db:86:2d:a9:a2:f7:23:e4:1c:bc:f2:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:E6:03:8A:A0:88:E0:99:F7:22:66:F5:79:F9:38:82:50:16:34
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:81:fb:5d:93:b9:9f:27:6a:31:a3:2d:83:a4:2e:79:06:
68:ed:b7:42:41:71:5e:ec:17:6f:02:0d:8f:ff:8d:54:48:2a:
83:41:2e:7d:e4:b8:73:d6:2d:28:49:e3:30:f9:14:2c:8d:83:
04:7a:82:a2:be:24:bf:81:69:31:fe:81:13:39:43:1f:36:6d:
08:24:a9:fd:4f:3c:20:6f:b3:72:66:ad:9f:f3:5f:29:23:fc:
88:4d:f8:16:44:3b:e9:53:8f:36:e3:44:c5:98:66:4c:9c:02:
42:11:fe:dc:af:52:f1:e9:9f:c5:6f:96:84:7d:a4:6d:a1:c7:
49:8b:bc:7b:d8:09:08:71:73:71:56:96:82:bf:3e:91:2f:dd:
47:87:03:80:3f:76:57:70:25:bc:88:e2:52:d8:23:86:c0:2e:
c4:ff:91:7c:d4:41:b9:e3:5c:18:6a:53:44:0d:ba:d7:37:e2:
bd:7e:17:39:71:d8:97:a1:c2:38:30:b4:90:e4:26:31:e8:11:
04:94:09:e5:5c:f5:20:a0:46:f3:f6:55:22:7c:5d:eb:9a:f7:
ce:21:d0:63:17:66:9a:3b:54:0f:bb:5d:1c:bc:76:4b:11:4f:
06:96:8b:5b:92:d6:bd:2d:71:30:4b:98:6e:5c:a4:a8:f5:1f:
c2:6a:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:43:04 2025 by rpki-client