Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: 8kMGlPdRuOVf0mFSVsnPtsYqwe34YytpmB9RXueGn/g=
Subject key identifier: CA:3E:83:08:CA:78:1C:E7:AE:28:E8:FB:FC:F9:D8:08:16:CD:41:8C
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0197469E074FC3FCBA5DFD4AACC0C4E16BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0D47
Signing time: Fri 06 Jun 2025 19:00:50 +0000
Manifest this update: Fri 06 Jun 2025 19:00:50 +0000
Manifest next update: Sat 07 Jun 2025 19:00:50 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: gt9/ZQongSjEgoJhm3jk675kTm1Dy19R2c7DnvY6Fy4=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:07:4f:c3:fc:ba:5d:fd:4a:ac:c0:c4:e1:6b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jun 6 19:00:50 2025 GMT
Not After : Jun 7 19:00:50 2025 GMT
Subject: CN=ca3e8308ca781ce7ae28e8fbfcf9d80816cd418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:0c:95:53:f0:8d:48:61:c7:4a:3b:cb:7a:
14:e9:8a:95:b7:a6:af:93:59:97:c2:08:d9:c6:18:
d3:c3:20:60:07:92:57:ec:49:f7:72:b1:c8:76:a6:
3a:83:0f:09:b7:45:22:bf:1b:71:f5:46:a8:90:02:
01:b6:d5:bc:67:e1:31:a0:a4:69:0b:d0:95:bc:d2:
1b:df:a6:01:29:6a:2a:00:d6:70:0f:12:4d:50:08:
cb:38:ad:a0:cf:fb:3c:41:4c:dc:4e:02:d1:19:d0:
fc:81:f9:9d:74:1c:1c:28:af:4e:44:45:53:de:0c:
26:be:c8:06:ba:0b:f0:8d:b0:d2:85:b7:de:2b:b9:
06:1f:37:c4:d7:1f:bc:7c:e7:84:3f:2a:7c:1b:3b:
ad:f7:77:78:cd:f6:f8:76:d0:74:c9:82:c3:88:19:
dc:eb:23:39:63:47:15:77:c1:b0:6a:f3:07:50:4c:
9d:b9:4b:ec:37:3d:d9:bc:44:f0:e9:81:63:ec:ef:
6d:c9:7a:63:eb:06:15:b6:8a:a3:bf:1b:97:6d:5f:
ff:79:e3:b3:ee:6e:03:4e:12:07:7d:4f:5a:47:d0:
6b:7a:e0:6d:cd:d4:ea:18:62:91:44:16:d4:68:bc:
a6:bd:e4:e2:9c:4b:a1:0f:84:ed:37:f5:81:55:57:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:83:08:CA:78:1C:E7:AE:28:E8:FB:FC:F9:D8:08:16:CD:41:8C
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:86:74:3b:6d:94:84:f1:f7:3f:7b:25:f1:d8:df:c7:38:9f:
5a:85:d4:6c:b2:fc:c2:ad:dc:98:2a:99:61:23:68:a2:6e:6f:
42:ba:93:a6:69:9f:53:74:1f:7c:9f:2c:3f:d5:b9:e0:de:a2:
65:d5:c6:a3:c3:bf:58:99:1f:7a:1d:fe:18:d6:4d:d1:7b:09:
a9:5f:c8:52:06:17:12:fe:48:9b:d6:bd:69:f6:89:41:92:16:
14:44:92:96:7b:5a:de:f5:5c:33:c7:24:ae:4e:63:5f:5b:1a:
bd:94:a8:6d:ee:d0:23:f0:a1:14:e5:e3:ba:33:75:69:35:7d:
bd:d9:ec:82:3e:2e:78:be:8a:0f:a9:fb:f5:5b:4f:44:1b:c0:
e7:7e:ce:ed:54:f2:84:90:03:ff:c8:65:b5:5a:f5:78:df:cf:
e9:db:76:12:01:07:8a:b5:ec:00:9e:ba:f5:2d:6e:df:27:b1:
93:d8:06:e9:34:2a:a1:98:4f:71:d7:f7:e0:c5:a7:89:77:0c:
ef:de:87:fb:8a:c0:f9:a0:bd:b9:33:48:0c:d1:4a:ba:e9:3b:
bd:9d:a3:6f:7a:2e:5a:41:de:35:c2:9e:d0:c9:d2:1b:7b:4e:
66:7d:a2:a4:17:7b:9e:37:12:a9:e3:c9:3e:58:40:d4:59:ec:
21:93:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:01:39 2025 by rpki-client