Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: GLz0a9AR66UAftCk5tDPPLcbEsbL0uFLYPhJ8PXuVFg=
Subject key identifier: 55:74:AA:5E:66:18:AD:AC:E8:2B:21:7B:6B:32:36:A7:67:C7:FD:DF
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 01974F334D28944EE1BEFD978BE3223EDBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 14CD
Signing time: Sun 08 Jun 2025 11:00:51 +0000
Manifest this update: Sun 08 Jun 2025 11:00:51 +0000
Manifest next update: Mon 09 Jun 2025 11:00:51 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: 5pphgzE1VT2QOfweRximqfNHz3WUoi/TpyFMZxlPcd4=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:4d:28:94:4e:e1:be:fd:97:8b:e3:22:3e:db:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jun 8 11:00:51 2025 GMT
Not After : Jun 9 11:00:51 2025 GMT
Subject: CN=5574aa5e6618adace82b217b6b3236a767c7fddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f7:97:86:03:61:3f:e4:88:c9:cb:08:2d:
5d:50:76:84:10:47:6e:20:36:57:60:aa:d0:da:de:
92:b6:0b:8c:2d:4f:b3:f2:c7:ad:ed:96:98:f9:f5:
cf:76:94:3a:c2:a7:20:b4:87:09:9a:a8:63:c8:39:
71:52:f2:8f:80:41:ac:5d:9f:82:fb:16:3b:d2:13:
01:db:58:02:d1:6e:07:96:2b:ae:14:b7:cd:af:0f:
f4:7c:e0:50:65:f8:44:c8:b8:17:30:e3:78:45:b2:
e5:71:27:de:e2:47:a2:52:7c:78:6b:19:77:a4:ba:
c5:0f:af:fe:10:2a:98:b7:79:47:81:fd:86:4e:ab:
af:a8:84:8f:cc:3a:f9:cc:30:8f:42:24:6c:53:1e:
32:5d:63:3a:7a:0f:01:17:d0:81:e2:4a:86:f4:2a:
45:a9:43:91:00:c4:72:b4:cd:f7:f8:25:f0:08:1d:
1b:de:bf:84:6c:64:04:4e:8d:67:b4:ca:1b:2b:d4:
dc:81:f2:4f:14:d0:3b:6e:cb:50:ce:3f:62:5e:c0:
67:5f:b0:e0:48:2a:66:8b:08:62:c1:6e:42:1a:e3:
6c:18:39:98:90:7a:17:a6:5b:f0:a0:6e:f7:f2:5e:
39:86:9a:cc:bf:1d:b1:bd:c8:cc:d1:f6:4b:da:26:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:74:AA:5E:66:18:AD:AC:E8:2B:21:7B:6B:32:36:A7:67:C7:FD:DF
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d3:29:fd:72:86:78:11:6f:0c:63:34:d0:d0:5d:f3:8f:27:
9e:42:09:92:34:e4:72:01:a3:98:3c:c1:8e:3a:9c:25:67:05:
0f:e4:0b:a7:24:b4:ea:1c:a0:4c:11:a8:f2:48:1b:25:e0:66:
fa:7e:ef:32:52:7e:3d:b6:8a:8a:9a:c7:a9:a5:5d:6e:fd:9a:
a2:6d:a1:54:3c:33:18:a0:75:50:74:8a:93:f0:e1:61:6b:a5:
27:35:0d:0e:5d:81:bc:f7:5a:7c:2f:60:b2:af:b8:92:57:5f:
1b:99:73:33:2a:10:97:ae:74:6e:4c:0d:ba:90:95:ec:fd:5e:
0c:dd:8e:9c:b1:48:03:6f:06:68:99:a4:db:25:95:cf:d2:6d:
ac:99:dc:b7:73:b8:dc:6c:de:8d:a4:4e:17:12:fe:92:01:07:
fb:f1:e7:18:10:31:af:f3:60:9e:70:7c:01:49:b7:de:44:c8:
30:02:c8:2f:67:82:29:b3:e1:15:b1:8a:22:1e:e0:6a:74:da:
6a:53:cf:a6:6e:19:0e:04:5a:01:92:7d:e4:6f:69:93:97:f0:
7a:fa:26:e2:5d:67:55:ad:c4:ea:3c:c4:30:83:70:b6:ac:1a:
c0:31:07:fc:43:5f:37:83:d8:26:b0:3e:04:7a:c4:6f:c3:a7:
ae:3e:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:36 2025 by rpki-client