Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: hTEJt0cun9PnLCn0lcgBtIL7xQTYBAXO8P667i+bC/M=
Subject key identifier: 85:A0:58:04:4F:4A:D4:EC:16:64:DC:3D:AE:51:B4:75:DE:42:4D:98
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 01974DE9C4859A8BA80687B7675A801188B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0D47
Signing time: Sun 08 Jun 2025 05:00:55 +0000
Manifest this update: Sun 08 Jun 2025 05:00:55 +0000
Manifest next update: Mon 09 Jun 2025 05:00:55 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: VKMeMvXF4ddto6RCil+IT9npQ3SZDy8eNRFjJ77ZII4=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:c4:85:9a:8b:a8:06:87:b7:67:5a:80:11:88:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jun 8 05:00:55 2025 GMT
Not After : Jun 9 05:00:55 2025 GMT
Subject: CN=85a058044f4ad4ec1664dc3dae51b475de424d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:a7:78:bd:8d:94:e8:de:83:b9:40:58:b0:
26:f9:a7:7e:c0:6a:48:b6:08:83:2e:cb:16:c1:5d:
25:13:02:06:7b:05:f7:75:61:98:a4:da:02:f9:6f:
2f:1b:76:6d:b1:45:3d:5d:65:80:6c:c7:b4:83:d2:
d3:b4:0a:24:60:15:b7:fa:61:82:fa:ac:81:7e:32:
34:83:50:0e:06:e4:90:ab:8b:d8:36:3b:46:de:46:
1a:8f:c5:b2:7d:cf:ab:b7:ca:6a:60:47:b8:53:6f:
1b:11:14:23:5e:d1:5c:46:1a:45:e1:54:77:47:24:
ba:79:92:35:b2:f4:0b:5f:ab:81:77:c8:c3:9e:70:
f2:35:04:17:0b:43:33:ca:87:68:c7:6e:15:c9:a8:
33:96:4f:cc:68:a6:82:ea:5e:51:98:96:a2:d8:fe:
3f:df:83:b3:76:12:54:1a:93:de:e7:a3:c3:1f:b9:
63:23:d5:ab:7a:a9:6b:89:e9:94:d7:cd:0d:3d:50:
17:94:4b:09:c3:ea:cf:dd:3c:85:76:ef:f5:01:2b:
cf:f7:d3:f6:df:6e:01:5e:95:d8:8b:68:93:75:23:
ae:6f:24:33:bb:8c:a4:d6:06:8c:26:9c:74:11:e0:
f6:88:77:fe:cf:e1:cc:23:bf:15:68:5e:9b:ad:45:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:58:04:4F:4A:D4:EC:16:64:DC:3D:AE:51:B4:75:DE:42:4D:98
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5d:7c:81:46:ad:e4:2a:2d:5c:bc:6b:6b:d9:97:95:ee:8c:
dd:02:8a:6a:1d:33:b2:a0:c4:72:10:ec:6a:e2:e1:3b:10:cf:
e8:98:72:f0:df:64:ce:9f:d6:ea:c2:d7:c3:42:59:17:40:44:
c0:40:3e:44:6e:7b:a0:57:d7:08:e8:2c:c8:e5:fa:01:38:c1:
18:23:83:ce:5b:9a:e7:18:6f:c6:b4:68:80:f8:1b:07:5d:bd:
da:76:eb:c8:5d:c0:3d:c1:96:ee:bf:87:91:77:a4:15:f9:a2:
6e:13:80:12:95:36:6f:dc:f4:12:d3:31:1f:15:69:3c:d1:33:
63:bd:5a:c9:c7:23:0b:31:87:2c:90:a0:1c:bc:59:a9:7e:4b:
76:4d:98:37:b4:09:6a:9a:5d:74:05:51:f1:cd:c2:de:2b:38:
3c:4a:2c:d3:02:9d:46:a1:aa:c1:4b:de:ff:62:f3:02:dd:09:
cd:6f:b7:f3:04:1a:0e:a9:b7:6d:d6:cd:8d:36:09:f5:32:03:
eb:6d:a4:ba:d2:84:fc:fc:4e:59:6a:e0:f5:e7:32:2b:a2:0e:
bf:9b:2a:05:71:bc:4c:4f:aa:aa:42:e2:88:31:cb:4b:de:f5:
e2:23:56:40:ed:73:0e:71:72:69:3e:4b:df:04:9b:e5:cd:dc:
cf:b5:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:54:53 2025 by rpki-client