Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: X6P2T3ZLjlMNygpyy7PhkZb2952qD1J947TYSZE9nLE=
Subject key identifier: 7A:FF:83:B2:E3:80:C5:C1:6A:05:5C:E4:52:C2:DC:96:0E:13:30:8D
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019745C2AA66D2FDA2E97F23A7887F5D49FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 0592
Signing time: Fri 06 Jun 2025 15:01:14 +0000
Manifest this update: Fri 06 Jun 2025 15:01:14 +0000
Manifest next update: Sat 07 Jun 2025 15:01:14 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: Izsv6UcwGdEozRG5PjMdvVuLUg+UmQrhLAsDRrjpx8w=)
2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:aa:66:d2:fd:a2:e9:7f:23:a7:88:7f:5d:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Jun 6 15:01:14 2025 GMT
Not After : Jun 7 15:01:14 2025 GMT
Subject: CN=7aff83b2e380c5c16a055ce452c2dc960e13308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:27:32:a4:8e:f9:f9:65:86:a8:be:bf:11:
44:5f:fa:cc:29:cc:4c:f7:0b:9a:57:5a:6e:69:4c:
84:e6:f7:b7:72:8d:fc:33:da:81:47:68:06:9d:bc:
c3:d5:20:fc:4a:26:fa:1b:9a:a3:6b:0b:a3:8b:22:
57:cd:5b:d3:f2:01:6e:49:82:2d:6a:69:70:46:40:
4c:e5:8c:a6:79:9e:a7:d6:58:a5:62:07:96:37:0a:
17:65:8d:cd:5e:9b:2b:d0:fe:b4:cb:3f:90:ea:19:
ae:66:a0:73:21:a2:28:de:ae:e9:42:67:13:f6:a3:
3a:36:4b:a3:6c:c5:25:4e:86:60:24:df:93:a7:71:
a3:2b:52:57:66:48:27:f5:49:7e:6f:13:bd:2a:77:
73:37:fc:18:18:7d:1f:e0:63:7c:9a:05:45:7a:2c:
87:da:44:4e:47:21:df:73:63:1c:8c:bb:aa:8f:4e:
a7:fb:f0:26:10:e9:98:f9:9f:e9:40:79:f0:eb:6c:
47:83:27:0d:1f:24:89:1a:70:8d:0b:b9:8b:f8:96:
20:61:fe:2c:74:96:f6:39:80:ad:f1:49:c6:d7:f9:
3a:d6:e9:1d:ae:72:8b:3a:59:51:37:85:65:1b:08:
89:08:22:02:e2:ac:5b:3c:3f:fa:f2:db:b1:c3:d5:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:83:B2:E3:80:C5:C1:6A:05:5C:E4:52:C2:DC:96:0E:13:30:8D
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:40:ae:70:c0:5b:43:74:33:13:41:34:54:a7:9d:26:e0:
bc:10:24:c1:47:ab:9a:e7:fe:51:8b:c8:82:22:fe:2d:75:c3:
12:c1:76:ba:3e:92:57:b3:10:fc:79:42:90:47:38:f6:27:67:
49:26:5c:ec:ac:4f:c0:8a:55:9f:5b:a7:ea:3a:15:0d:ef:23:
37:fe:8a:9f:37:0a:17:fb:e0:31:59:a6:1f:c5:c2:cc:9c:4b:
7b:d3:c8:b4:ec:59:ca:0e:90:b1:e0:67:bd:7b:d4:ca:ed:8d:
20:70:f6:9d:6f:a4:16:a9:79:1e:84:8e:1e:b8:ba:18:e2:58:
f8:f7:aa:99:a6:a2:d4:2f:0c:3e:5c:eb:a6:97:45:d5:69:81:
1d:ed:8d:38:8a:35:54:31:62:65:4a:fb:36:8b:66:09:9c:04:
48:87:5f:08:f2:24:78:b0:58:07:1c:42:b7:26:e7:10:a7:92:
d5:78:4c:1c:8d:e8:94:51:b6:2d:96:53:80:5d:8a:44:61:3f:
24:db:78:0b:2b:7b:af:99:4f:54:03:f5:44:88:31:71:4e:ea:
84:55:17:88:af:73:6c:cf:8b:3d:05:d0:6e:f8:98:a0:41:d5:
45:6e:4f:9d:4e:1d:25:24:4b:f3:ea:57:7f:8f:c5:fd:c6:5e:
05:bc:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:37 2025 by rpki-client