Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: ahAkISWezcC7r6QTgtiQISQUNn9qhsoYw9NZh8Ot3Hk=
Subject key identifier: 11:C3:FE:1C:E2:45:7B:DA:F0:57:9E:2E:3A:BB:90:79:02:77:E8:B3
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01975234A256D7E30219F917628674BDAA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 01:01:10 +0000
Manifest this update: Mon 09 Jun 2025 01:01:10 +0000
Manifest next update: Tue 10 Jun 2025 01:01:10 +0000
Files and hashes: 1: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (hash: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: Q8Z95AdlT+puedEIX3oxQb9rWxZs9NKAjCEcq1/9dII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:a2:56:d7:e3:02:19:f9:17:62:86:74:bd:aa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jun 9 01:01:10 2025 GMT
Not After : Jun 10 01:01:10 2025 GMT
Subject: CN=11c3fe1ce2457bdaf0579e2e3abb90790277e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:51:fe:5a:6f:cd:db:26:25:2c:54:23:93:
73:ab:bb:ae:a1:dc:34:22:c8:87:c3:8a:e5:5f:3a:
70:9e:64:c6:57:27:ca:0b:6a:86:37:e8:9f:ad:1b:
24:d4:0e:4f:fe:28:7f:9b:53:f8:96:2d:22:ae:62:
7b:c2:6e:82:f3:9d:84:be:9e:a4:d8:cc:13:73:74:
fe:08:18:a0:e3:90:52:95:90:3b:8b:15:d0:79:3d:
2c:9f:d1:1e:04:cb:43:82:f5:9a:39:0c:c3:3f:81:
4f:40:63:88:64:b6:0d:10:79:6b:b0:26:ef:00:02:
d1:b6:ec:71:5a:7a:b0:32:b1:e1:0b:7a:7d:c6:40:
9e:94:59:2c:6b:15:13:de:ce:08:67:b4:14:01:c9:
20:dc:83:3b:7d:47:b2:f2:20:55:c5:7c:ca:94:4b:
78:8c:df:37:58:87:5f:80:00:fa:3e:78:f0:9a:4a:
eb:bc:71:ff:e4:47:d1:ae:e3:da:d5:3a:a3:a6:61:
83:1f:36:ae:ef:e7:b1:e9:8f:72:1c:27:56:cc:7d:
70:06:77:61:ef:6c:fb:4a:b4:88:3e:2d:31:c1:ea:
9e:78:e9:a6:97:9d:51:5b:2d:d2:84:5c:4d:1f:64:
83:19:81:ab:6a:62:78:d8:3d:38:02:f3:cb:60:f3:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:FE:1C:E2:45:7B:DA:F0:57:9E:2E:3A:BB:90:79:02:77:E8:B3
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:84:95:8d:4e:0a:38:50:60:b9:32:02:37:e5:46:d3:2a:
7b:ec:45:c7:ae:94:e6:ec:b3:82:39:49:dc:d2:1a:6b:41:5d:
a8:7f:fd:3a:f7:80:ab:22:9f:cd:34:8a:95:31:8a:ae:4f:b2:
ea:a1:a9:e0:00:a5:b0:62:5e:45:9c:4b:ab:45:3b:e7:41:b6:
5a:30:f6:ba:e1:f3:a2:86:fc:18:a6:fe:e6:7d:c6:2d:57:66:
74:83:83:79:98:29:85:3b:5e:d0:d5:d9:2d:6a:61:39:ce:cc:
d0:69:62:fd:3b:13:e8:38:40:33:d4:22:b3:f6:9b:bc:ba:bd:
b4:33:33:45:49:54:8c:cc:f0:9e:bc:fa:64:1c:f9:5b:3c:38:
c6:8f:1a:e2:82:89:0a:d2:f1:27:70:08:1f:6b:29:ad:d3:e4:
6b:cf:4a:7c:9f:6c:d2:af:ea:f3:0a:50:3f:95:9b:76:e4:03:
08:18:96:6c:b4:4f:46:d6:a9:9e:b2:6a:f6:de:36:a7:48:fd:
71:2e:ac:8a:2b:79:92:5d:52:16:24:b9:52:ac:13:91:8b:9e:
19:b7:41:72:08:02:6c:87:0d:af:62:2f:ae:85:c4:22:bb:e2:
ff:f9:78:02:11:ec:5d:c3:5d:81:9f:f8:54:c1:69:22:a8:b1:
99:34:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:20 2025 by rpki-client