Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: XvCZ9KbRVeDzhYXvOP2KwWGGalibSH5FtG8WU3QoDEk=
Subject key identifier: F5:FD:77:AD:D7:A2:0E:03:E2:1B:88:06:99:DC:B5:E5:03:03:BB:51
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 019747E7B15B29AC10104BB3D96078EBD7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 020F
Signing time: Sat 07 Jun 2025 01:00:55 +0000
Manifest this update: Sat 07 Jun 2025 01:00:55 +0000
Manifest next update: Sun 08 Jun 2025 01:00:55 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: DiPZf+zCnfAL6TuMNkosPHhBUMsat42YFWmZB8FPlGw=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b1:5b:29:ac:10:10:4b:b3:d9:60:78:eb:d7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jun 7 01:00:55 2025 GMT
Not After : Jun 8 01:00:55 2025 GMT
Subject: CN=f5fd77add7a20e03e21b880699dcb5e50303bb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:61:85:ef:73:e9:45:f8:db:23:86:35:08:
ad:e6:2a:d4:ef:ec:7e:26:24:7e:46:2b:c8:c1:b6:
e2:40:87:0d:a9:ad:a0:69:51:59:c3:2b:60:ac:d2:
fc:15:e5:1c:6c:4b:dc:8a:8d:70:ce:9f:6c:9a:14:
d3:b5:69:6c:55:93:0a:af:c0:15:f4:eb:91:a3:e4:
1c:36:93:5f:07:d8:97:24:17:e3:d9:a5:5d:19:46:
93:d1:08:0f:24:0d:b7:7b:51:3d:bd:9f:85:34:41:
6a:0e:8d:f2:af:c7:91:94:5d:a5:3a:62:7a:75:d4:
e8:54:4b:2b:fa:fc:b5:e6:53:c2:b2:40:fd:fb:cc:
eb:0e:b9:fa:5f:57:d2:ee:ab:e4:a1:70:dd:07:43:
96:3e:d2:38:cb:0a:ae:2f:f2:bd:0c:64:32:8f:0a:
d0:29:dd:54:fa:a0:73:b7:e5:67:09:d3:62:09:bf:
3f:c7:6e:7c:d5:3c:9c:4d:e1:bf:02:8e:10:35:a3:
43:af:09:03:08:0a:c6:f6:f6:d1:3a:25:e4:1b:07:
c3:66:1e:ff:51:11:85:ff:cb:77:17:51:fb:4a:e9:
3e:40:2d:ab:0f:8e:ac:e6:63:af:3c:c9:44:43:72:
46:c6:a8:36:00:a0:b9:f0:8c:de:eb:d6:15:89:33:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:77:AD:D7:A2:0E:03:E2:1B:88:06:99:DC:B5:E5:03:03:BB:51
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:f9:0d:03:d6:d0:a6:25:3d:38:07:69:ea:36:ba:6b:62:
32:9c:ee:1e:a4:a7:05:2c:85:af:df:9f:da:c4:93:3f:82:8a:
2e:9c:18:35:8d:9f:b6:60:c0:fb:3b:95:b5:f3:60:bb:53:a8:
dd:32:40:78:8b:c3:4f:a6:e7:df:8d:c2:f1:34:40:5d:97:93:
41:f9:e9:82:de:0f:f5:b0:28:6f:e6:24:c7:5b:50:7b:ee:2d:
d4:42:9c:7a:0d:71:a4:00:da:d1:bb:ad:7c:d0:d6:fb:9b:e9:
f6:0b:1d:33:fd:15:a5:d3:04:38:ae:51:86:fa:6b:3f:35:c1:
97:7b:a2:b3:3e:a1:93:ce:8b:56:00:a4:03:cf:c1:a5:d6:38:
19:75:34:92:b4:fc:a9:17:a5:15:67:12:7f:43:3e:a1:a4:3c:
88:14:e1:0c:86:9f:8a:12:4e:3e:fe:4c:39:38:79:99:d6:7a:
77:f4:1a:b4:2a:a8:9d:ee:bc:73:74:d6:7a:bb:fb:b5:67:fe:
76:38:0f:a9:62:7d:6f:49:e9:a8:ae:ac:46:2a:1a:71:06:44:
75:92:bc:a2:1e:e9:7f:6e:49:46:7a:4b:3d:2d:0a:26:58:56:
11:f6:d9:f0:f0:ae:3d:53:d3:86:11:c0:19:c6:b8:bd:b3:fa:
c1:6f:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:07 2025 by rpki-client