Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: +A4bMAOBorjHW1G+LKHFMokp5wX/tW6GRTqrMkQIrRo=
Subject key identifier: 28:3B:A0:39:74:D7:12:E7:91:10:B4:E5:51:79:EA:31:FE:9F:33:DE
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01975CB7B6CDD05EE9B17E4BA7521FA7B37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 02:00:33 +0000
Manifest this update: Wed 11 Jun 2025 02:00:33 +0000
Manifest next update: Thu 12 Jun 2025 02:00:33 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: 365NMAzOwIOHH/bATFjI3nrQsEfXbNgO5RThnZydcdM=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:b6:cd:d0:5e:e9:b1:7e:4b:a7:52:1f:a7:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jun 11 02:00:33 2025 GMT
Not After : Jun 12 02:00:33 2025 GMT
Subject: CN=283ba03974d712e79110b4e55179ea31fe9f33de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:05:c2:95:ac:6a:d6:30:d6:15:b7:50:c2:
38:4a:61:ee:97:af:ab:d6:49:b3:d5:a6:ca:55:29:
93:ac:d3:8a:bd:42:cc:d2:8f:08:4f:9d:ec:4f:a5:
21:17:05:f8:99:9e:8d:7b:b6:be:a2:6f:4f:91:1c:
22:c7:a5:48:37:79:79:3f:77:66:d1:5d:27:ba:d0:
fe:c4:41:f7:61:38:4b:3a:49:7d:49:7f:09:1f:be:
10:2e:cd:97:01:2b:b6:be:82:f5:f7:c4:99:4c:5d:
1a:3f:60:aa:66:e7:6a:54:ed:30:a1:1c:55:1c:e2:
5e:c7:fb:c3:25:33:b9:32:28:c2:3f:0f:82:e1:86:
8d:21:61:ea:33:93:5c:0a:e2:df:1a:27:55:38:e3:
cd:56:9e:53:25:fa:f7:a8:55:c7:84:47:35:8e:ff:
9c:cf:eb:fa:b3:d4:a4:02:61:a8:f8:43:ac:ab:f7:
43:ef:a1:18:87:53:66:18:a0:9e:f4:d3:61:0b:5a:
e3:84:12:63:8a:86:c2:68:22:89:b6:9a:9f:28:90:
08:94:df:a7:14:7b:fe:c1:e2:a2:22:62:dd:a0:fb:
39:7e:96:60:1f:57:d3:e8:7d:22:09:9f:4b:33:b0:
02:97:00:57:f9:cf:95:32:b0:b2:80:e7:0a:4f:6b:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3B:A0:39:74:D7:12:E7:91:10:B4:E5:51:79:EA:31:FE:9F:33:DE
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ae:19:72:18:c8:0b:5a:c4:ed:ae:1d:f8:d2:d5:a7:90:e0:
ff:b5:c4:44:60:89:70:8a:5c:7c:0d:9f:f3:b5:ba:c1:91:b2:
b0:3e:93:f0:6e:4c:83:e6:5d:51:1f:82:e7:38:dd:39:32:ef:
5f:9c:c9:4e:a6:ea:50:02:30:7d:3d:d4:7f:a0:12:3b:d6:21:
62:f6:db:a7:9c:d2:fa:e8:d9:86:58:2a:f5:ec:dc:a1:fd:78:
49:11:5b:fd:9c:4f:ef:cf:57:81:04:ea:5a:86:1a:14:c7:48:
70:4b:5e:f4:88:8a:92:fd:92:2a:7e:d9:ea:f4:30:3b:dc:ba:
84:8c:7f:31:f0:dd:1f:ef:9d:2b:1e:79:7c:0a:56:d7:80:c8:
14:1e:a3:4e:aa:41:43:49:7d:25:61:7d:ac:fc:30:66:35:53:
29:08:43:cd:1e:af:eb:a8:49:77:2a:83:71:0b:9e:55:b5:6a:
7d:4e:67:50:a6:6a:f0:9d:92:a6:f0:5d:5d:ab:a7:36:2c:f1:
e7:7c:1a:76:dc:5c:c8:9d:92:e5:ad:be:6b:51:6c:e3:36:2e:
ee:27:61:e2:c5:f4:ec:9a:ec:53:31:fb:ef:bc:14:0a:f6:40:
e0:ed:e9:e7:e4:c2:3a:71:4d:48:f9:62:21:a1:a1:55:bb:bd:
77:eb:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:21 2025 by rpki-client