Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: TA3ksLQ8KKTBVVpCNhHEC8e/Jrg9yVN+w9TR2ggQ+Lk=
Subject key identifier: C1:13:F7:AE:41:20:77:C3:DD:F4:8B:C3:A7:3E:50:90:D7:30:1F:36
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 01974F6A056C64930CCEBC15081A4696A817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1586
Signing time: Sun 08 Jun 2025 12:00:37 +0000
Manifest this update: Sun 08 Jun 2025 12:00:37 +0000
Manifest next update: Mon 09 Jun 2025 12:00:37 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: NkcMZIO1I7RMNLj57OCDaLl70paeK6eQ+ekM4xNQPo8=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:05:6c:64:93:0c:ce:bc:15:08:1a:46:96:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jun 8 12:00:37 2025 GMT
Not After : Jun 9 12:00:37 2025 GMT
Subject: CN=c113f7ae412077c3ddf48bc3a73e5090d7301f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:2b:ed:e4:b8:9d:da:15:fc:89:fe:8a:49:
c6:c9:be:d8:0b:53:2c:84:de:8f:14:be:ad:0b:cf:
33:68:48:a9:33:31:aa:cd:4d:8e:aa:eb:c5:48:f9:
ed:f7:7d:52:13:57:af:37:8e:86:79:d6:29:e5:6f:
39:d9:cc:ef:6f:69:08:86:49:bf:6d:52:db:34:51:
9b:83:65:65:4a:ab:fe:29:cc:60:bb:f4:51:3f:1c:
6f:d3:e0:ad:8f:5b:f1:0c:c4:15:82:ad:c8:8c:6f:
0f:2f:f9:42:34:60:09:4c:40:8e:82:b6:cf:52:52:
38:0c:6e:e9:bf:6c:cb:bc:69:ae:e0:24:0f:c9:41:
1a:fb:d8:04:8a:82:20:14:00:15:32:26:71:74:00:
7f:8d:b6:2c:82:b2:84:84:2a:dd:5b:67:64:06:82:
9f:94:12:aa:33:5a:0b:01:b9:6b:77:8f:7a:fe:23:
b7:8f:aa:f5:15:6b:65:46:c7:d6:ac:85:1c:1c:1e:
ab:47:29:f7:98:54:48:ec:37:9e:ca:eb:19:40:f3:
c3:a3:8e:1d:30:67:5f:77:d0:46:70:5f:d6:96:f9:
79:39:65:e7:3c:2e:00:1a:e9:21:f3:e5:72:50:3c:
c2:7d:a1:8a:d8:75:3c:cb:a9:a6:8b:fa:92:4a:05:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:F7:AE:41:20:77:C3:DD:F4:8B:C3:A7:3E:50:90:D7:30:1F:36
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:c7:a5:7e:de:8c:d7:42:e1:bb:06:4c:f8:a0:a6:72:ca:
f8:f8:dc:4b:f0:f4:d6:e9:b4:49:e1:1d:19:70:90:17:ca:ca:
af:bf:d4:bb:c6:17:59:0a:f4:a5:2f:d4:47:0b:f6:8a:54:07:
c7:77:5c:e9:fd:28:29:58:5c:53:6f:71:7d:d4:da:d5:1d:da:
e0:bf:f0:25:25:e4:0d:a2:60:48:1e:ef:b5:1e:cd:6e:ad:b6:
46:79:41:45:df:51:11:8a:66:fe:51:36:9e:b0:6e:3a:cb:86:
0e:f3:01:e8:08:2f:67:3b:cf:cd:b7:80:6a:af:74:e5:7d:41:
b2:4d:5a:31:b7:f6:02:d9:0b:d0:7d:3d:52:d2:42:dd:e6:e5:
a9:c6:e2:7c:06:7f:d3:5d:99:ee:68:7b:91:cf:1e:e8:02:28:
37:82:ca:49:67:52:f6:21:11:dc:16:5e:58:b9:7b:7d:8b:0f:
e6:6a:77:58:e6:fa:a8:1c:0b:00:e2:2d:a4:f9:77:d4:53:85:
5a:2a:d9:a3:d9:ad:70:c4:49:0b:5d:7d:a4:96:c2:25:de:e7:
d9:ee:61:45:9f:9b:82:c4:d5:6b:c9:f5:4e:67:ae:76:b3:9c:
cf:83:9a:2d:57:e6:da:5d:24:5c:78:8c:78:3f:15:7c:14:87:
1e:48:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:05 2025 by rpki-client