Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: 7s7PovjqYGCII9d3wo85GvXHMt6nIkRhheyhqRGYlyo=
Subject key identifier: DC:03:D9:83:08:92:C1:7F:41:B6:34:77:30:F6:3A:BE:8C:6B:CC:A5
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 01974C9FFDE3C38828FB4ECC2B84A65D48AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0286
Signing time: Sat 07 Jun 2025 23:00:42 +0000
Manifest this update: Sat 07 Jun 2025 23:00:42 +0000
Manifest next update: Sun 08 Jun 2025 23:00:42 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: 5Aid3WkTqOZNqhNPuxyKawHAuXyE9umIl+rZJL+9SBM=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:fd:e3:c3:88:28:fb:4e:cc:2b:84:a6:5d:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Jun 7 23:00:42 2025 GMT
Not After : Jun 8 23:00:42 2025 GMT
Subject: CN=dc03d9830892c17f41b6347730f63abe8c6bcca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:77:3e:b8:7f:10:c8:a8:0f:ae:cf:a4:19:
38:69:c5:1c:96:23:f6:b4:86:82:9c:31:e7:1d:d4:
43:77:21:f1:7d:ed:fd:92:0d:93:0c:54:1c:4e:6e:
88:e3:02:6b:0a:9b:70:53:55:3b:04:c5:65:1e:6c:
c1:7f:8c:96:58:22:53:7e:df:37:f8:70:ce:71:8e:
bb:72:da:7f:bd:31:a8:e5:58:4b:b0:dc:95:55:0e:
73:c0:2f:ba:2c:bb:87:73:6f:64:a5:0c:ee:51:93:
2c:db:78:4b:b1:26:cc:f9:66:6a:36:d6:c9:17:35:
6e:3f:66:95:98:9f:06:97:64:5a:fe:12:4c:f4:28:
6a:1d:fa:d6:50:b9:f5:c4:3b:e4:46:3b:28:e1:00:
f8:64:ae:a3:f3:6d:3f:ff:38:9f:cf:46:ca:f3:58:
ba:4c:0a:f4:ed:fb:0b:ca:44:13:91:e4:ee:27:88:
37:e5:06:9b:03:8a:58:a8:7e:ca:c2:93:ed:dc:1b:
7b:7d:0d:9a:82:2c:15:55:c9:3f:ae:7d:ae:89:42:
5f:f1:41:07:f0:02:50:2f:ee:97:b5:9a:d3:29:19:
eb:f3:aa:31:41:8a:90:e0:db:c2:b6:3a:de:38:90:
f9:e1:a2:62:52:0c:b6:bd:77:00:fc:3e:59:3b:77:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:D9:83:08:92:C1:7F:41:B6:34:77:30:F6:3A:BE:8C:6B:CC:A5
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:d2:ba:da:24:cc:0e:de:7e:6b:46:18:22:92:ac:32:ca:
70:a4:a2:82:d0:b6:17:62:02:8a:84:0a:76:5f:40:c2:14:96:
2f:fe:e0:ce:ba:0b:6d:a2:32:62:16:e7:2b:60:a3:e4:8e:cf:
a8:fa:b3:cc:8c:d1:ee:40:b0:e4:10:a7:df:73:eb:65:3c:ca:
3a:d6:fd:bb:46:2d:08:c7:07:dc:b8:3d:10:70:44:d5:99:93:
e8:00:dc:93:60:cb:03:6a:a2:35:27:22:94:2d:36:f7:0c:f8:
c0:b0:9a:89:00:df:1b:df:cb:f7:da:e4:e8:bf:c6:21:00:c4:
ea:7b:c5:92:64:b8:7c:a7:c4:95:9c:44:00:ba:d4:f7:d4:27:
82:ee:56:f6:d8:6b:a9:bc:d8:b7:93:10:4b:8e:51:ac:21:77:
22:44:39:c2:81:ef:23:da:7f:49:c1:bb:b2:cc:56:10:ce:01:
89:4c:2d:b6:24:eb:0a:9a:4d:dc:a5:67:34:9d:d9:a2:b1:15:
a7:03:b8:79:16:e2:31:5f:f8:26:f3:cd:c9:5f:10:5b:c6:a5:
6c:60:c0:5a:38:f8:92:d2:fe:7c:27:4f:03:c4:e8:14:b0:d4:
8a:79:10:31:bd:16:bf:18:e4:d7:ee:92:8d:aa:ac:b9:46:f9:
95:da:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:44:38 2025 by rpki-client