Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: zq5uU+rAz1CDSBQH5NtFqMPt5N3asrfpj2MSioBo+v8=
Subject key identifier: 8C:AF:F3:19:58:63:4B:40:73:E7:4A:1F:CB:6F:A2:7B:A6:73:8E:01
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 019745F963A41CC537BDB927D7E6A6FED89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0E76
Signing time: Fri 06 Jun 2025 16:01:01 +0000
Manifest this update: Fri 06 Jun 2025 16:01:01 +0000
Manifest next update: Sat 07 Jun 2025 16:01:01 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: KOHuVH1eZ8m/dHrOTwN1AAnAc6xyU7jGooupYSLcbFA=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:63:a4:1c:c5:37:bd:b9:27:d7:e6:a6:fe:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jun 6 16:01:01 2025 GMT
Not After : Jun 7 16:01:01 2025 GMT
Subject: CN=8caff31958634b4073e74a1fcb6fa27ba6738e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:ce:6d:64:2d:a3:51:6e:69:27:87:40:da:
7f:94:d3:9b:9e:00:13:40:f3:b2:6c:91:13:a2:e7:
85:75:14:47:e7:92:07:c2:7f:08:9b:37:64:69:f3:
1d:77:99:03:1c:ec:c3:dc:75:80:72:5f:86:a9:e3:
7e:3e:d7:34:17:bd:ea:44:76:28:6e:fe:c1:b3:81:
a1:1c:d8:57:f8:08:4a:3b:0b:72:6a:01:cb:de:84:
0b:8d:83:05:45:61:bd:1b:bc:fd:95:29:20:50:bd:
26:eb:3e:61:0c:4a:9d:d7:2b:f2:72:94:44:fe:1b:
b5:f7:9b:24:6f:b5:93:d5:a4:df:fb:9a:db:1c:7a:
eb:cd:cc:1d:02:ff:ad:db:07:c9:15:d2:81:9b:00:
6c:01:c5:f6:d4:ba:72:02:b7:a2:5e:8e:c3:de:bb:
b0:10:5e:52:e5:b0:81:ef:f0:28:37:d3:34:41:47:
95:4f:df:c3:da:23:2a:96:a7:13:ae:dd:68:61:dd:
97:ad:0c:5a:8a:80:a8:ee:61:f2:84:e1:c1:3d:f6:
60:b7:ba:88:d5:53:73:f4:9f:a3:97:6a:e1:ec:85:
af:36:c8:b2:2f:37:9b:52:ff:ba:6b:ae:6b:02:ba:
f7:a3:1a:b9:6a:71:ad:22:7e:79:d4:5e:bb:4d:dc:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:F3:19:58:63:4B:40:73:E7:4A:1F:CB:6F:A2:7B:A6:73:8E:01
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:72:46:ad:e5:83:62:ec:2a:57:74:cd:1e:ff:6d:83:10:6a:
f0:05:6c:d8:3c:35:a4:89:f1:b6:5c:6e:23:42:09:f0:f7:0c:
2f:fa:6f:9e:8d:4c:5f:52:d3:0f:1a:60:43:3e:2a:79:84:bb:
36:d3:6f:4e:fd:4d:5e:8c:28:c2:27:0a:5c:06:2b:7b:6c:df:
f3:49:d4:99:d7:2c:bd:1d:2c:f1:b1:60:8f:33:fb:16:50:50:
6b:8a:d1:34:1f:7c:f6:04:28:44:4b:b4:c7:eb:3d:f8:03:2d:
29:09:8e:01:45:11:17:71:ac:c7:70:89:77:5a:5c:f8:2d:b0:
d1:c0:39:1f:40:da:33:4c:c4:be:1e:38:34:08:2c:12:99:70:
5f:b7:aa:89:d6:3b:f1:91:91:be:bd:1d:ee:3c:66:f9:a5:f2:
39:28:f0:16:aa:99:6d:e2:54:c8:f8:58:96:ba:ef:4e:03:2b:
fe:73:24:25:bc:99:ae:6c:44:2c:9c:23:29:a6:fc:7d:ea:4f:
c3:65:f3:0e:4c:ed:19:b5:b3:9c:71:3d:a3:61:72:7e:0e:99:
2e:2d:89:07:b3:8e:52:29:4f:c8:19:20:23:03:81:e5:6c:3e:
af:d9:4c:71:df:79:a2:c8:06:3e:7b:60:e4:4a:f3:d1:95:63:
1d:35:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:49 2025 by rpki-client