Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: /f+PD0GhWUL6fJqe2oPqiVNFHzsKop4OaljBQB7WWn4=
Subject key identifier: E9:CE:92:79:08:01:83:89:F8:68:2F:84:18:2A:06:EB:4B:C3:8C:92
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 01974742DA71B10F467ABC02519C5A5C3326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 094D
Signing time: Fri 06 Jun 2025 22:00:52 +0000
Manifest this update: Fri 06 Jun 2025 22:00:52 +0000
Manifest next update: Sat 07 Jun 2025 22:00:52 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: hDD9UWvzQ16e1M8bWz32z263KJrsdQVTaQic8P0tmsQ=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:da:71:b1:0f:46:7a:bc:02:51:9c:5a:5c:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Jun 6 22:00:52 2025 GMT
Not After : Jun 7 22:00:52 2025 GMT
Subject: CN=e9ce927908018389f8682f84182a06eb4bc38c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:b3:99:69:b6:35:e3:b3:0a:89:6b:dd:ae:
ba:d1:70:b6:b8:59:90:f3:11:c2:91:0a:76:f4:49:
0d:25:57:26:5f:8d:6b:f6:4e:ef:70:53:20:3f:ee:
18:f5:7e:96:01:6c:51:16:d7:f5:20:c1:07:d9:78:
8a:04:71:3c:ea:80:ab:8d:69:72:4c:4b:35:63:e7:
67:d8:01:9f:94:e7:6c:f2:e0:37:b0:88:16:8d:82:
10:08:23:8e:a6:e3:fd:bd:c4:25:23:45:d2:ef:18:
3b:ec:64:82:45:09:c8:ce:bf:f3:9e:a1:f0:3e:a8:
b9:83:85:1c:bd:f9:dc:88:34:99:c2:64:d4:44:e6:
33:25:c2:10:e1:6f:39:40:df:55:ab:cf:f3:1e:93:
f2:09:6e:83:86:d6:3c:20:02:9a:12:a5:77:fc:df:
ae:b7:6f:ea:78:0c:fc:2b:69:4a:ae:fb:a3:ff:f4:
ed:c8:9c:8c:7b:0d:01:c5:53:71:b1:fb:eb:12:de:
09:8c:90:a5:f1:7b:87:62:e7:74:d5:28:7e:a8:41:
66:9a:9e:11:fe:7b:1e:9a:33:53:be:61:ae:bb:92:
11:be:aa:a0:dc:9f:42:d9:da:2b:5a:2c:97:c7:d1:
57:1d:31:7b:21:64:2b:45:53:9e:77:cd:78:ee:9a:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:92:79:08:01:83:89:F8:68:2F:84:18:2A:06:EB:4B:C3:8C:92
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:f4:76:45:bc:e8:0e:97:25:00:4b:33:70:e0:1f:c0:98:
27:b3:d7:30:98:30:db:ed:01:24:fc:a8:67:d2:c3:47:4e:e7:
ba:53:ae:62:a0:1f:97:ad:f2:f9:fe:24:08:50:a9:3e:78:ef:
ab:86:77:f4:10:48:8c:2b:04:60:5f:7d:ef:76:22:96:a5:e1:
a8:dc:04:65:3c:31:39:6b:1f:21:ff:45:a9:ab:83:25:31:fd:
41:5a:f8:e5:e3:5f:47:e1:63:96:2f:32:07:6f:12:d1:c7:05:
71:bd:71:64:1c:02:91:77:45:5d:40:56:b9:9e:f1:b7:ff:7e:
68:65:12:ac:94:1f:77:b0:c1:f6:71:70:e3:59:7d:f6:77:b2:
39:2e:16:97:d8:7c:01:96:87:c5:12:92:6a:e4:87:f6:f3:0d:
a3:4b:30:63:c4:1a:dc:74:f1:01:c3:05:21:2e:d9:e2:2b:0e:
92:bb:18:cc:ef:76:b1:e7:a1:c6:42:95:04:f5:cc:b8:73:ed:
ce:b3:f7:b4:16:16:37:0a:cb:00:a8:1f:07:a2:b9:45:59:c4:
ab:e6:58:8f:63:97:8f:83:4a:42:ff:5d:ac:8f:f3:cb:9f:45:
00:50:0a:5f:36:97:d7:ca:9a:70:37:5a:97:ee:c0:bc:d1:87:
74:a4:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:10 2025 by rpki-client