Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: jRu9+DDkiHg++dV18ur7Skc1quMFveUpHovtytwY1Xs=
Subject key identifier: FF:5C:28:6C:9F:4D:D6:A5:55:22:BB:E5:4D:61:15:B2:CE:AC:AE:59
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 01974F6A303E6FC6BC275D40EB4B43F48495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 12:00:48 +0000
Manifest this update: Sun 08 Jun 2025 12:00:48 +0000
Manifest next update: Mon 09 Jun 2025 12:00:48 +0000
Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: kedv3Ykpfk+dkGZjm8YJ/DtZnjreKtpsXtjkrLR9Kgg=)
3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:30:3e:6f:c6:bc:27:5d:40:eb:4b:43:f4:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Jun 8 12:00:48 2025 GMT
Not After : Jun 9 12:00:48 2025 GMT
Subject: CN=ff5c286c9f4dd6a55522bbe54d6115b2ceacae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:99:ea:90:a7:2e:9c:51:7a:56:04:a5:4d:
92:84:87:f3:26:a7:8c:3a:f8:ad:5c:7e:5c:f7:cc:
bc:d2:44:2b:5f:99:1a:dc:e2:40:7c:66:50:d8:e6:
50:cf:be:3f:67:d2:93:93:95:ae:ed:cd:ee:a0:42:
35:ef:59:33:bc:b7:82:b7:9a:76:fe:d9:ae:74:d4:
fa:7c:a2:ac:8c:69:f6:19:29:0b:e6:b0:4a:c8:70:
58:3f:98:b2:a1:a0:97:54:46:fc:5d:be:35:95:9b:
0d:c5:f5:cb:e2:21:64:98:a0:5f:3e:d7:1a:74:03:
81:14:c4:69:ac:ea:8a:09:eb:e2:33:78:9a:66:bf:
60:14:db:85:f8:a2:a0:b2:2c:a4:42:72:bd:1f:87:
b4:8a:3b:07:e7:81:77:e9:73:0d:0a:b4:20:ba:ed:
68:09:36:0c:2b:28:57:ff:69:89:e9:0b:f3:89:b4:
2d:20:e2:41:a1:d6:57:ba:3a:75:0a:19:46:15:1f:
01:7e:ac:d0:6f:27:ee:2b:5d:f1:d5:53:44:07:31:
42:94:3d:b0:d4:49:ff:de:d6:d0:7a:20:fe:3c:11:
f4:1e:2d:b9:62:d8:61:a6:a2:19:0e:c6:c3:0b:ec:
2f:0d:82:4c:a8:01:79:19:15:fc:cc:a7:90:ac:08:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:28:6C:9F:4D:D6:A5:55:22:BB:E5:4D:61:15:B2:CE:AC:AE:59
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e2:42:68:de:ff:30:83:c2:b1:6d:0d:31:2b:d9:15:17:6e:
f2:66:16:a8:20:68:ad:51:62:9b:7d:86:9c:8c:cb:fa:3c:bc:
06:b2:a0:57:86:39:e1:47:70:11:05:94:39:8d:ea:e6:4d:4b:
4a:f3:9e:e5:5c:62:3e:da:39:f2:a0:0f:ce:85:8f:c5:80:a4:
bb:96:01:56:fb:aa:54:bc:d7:3e:ec:81:31:16:a4:dd:8c:3b:
21:88:07:c2:de:31:73:33:b9:8f:70:94:2f:03:14:3d:d2:a5:
a7:5b:e2:32:c1:5e:ba:ee:c3:b1:0c:ab:06:f8:91:d4:cc:ce:
1f:08:15:97:09:03:37:7d:dc:db:6d:49:4a:65:1a:17:7d:d0:
03:f5:72:45:f1:51:87:fe:53:d3:7a:1b:d9:f3:13:62:67:a9:
0f:f1:e4:57:37:9d:4a:d3:f1:e8:29:e4:17:c3:7b:48:4c:52:
31:39:a6:73:b2:8c:fa:c6:ea:a6:28:fe:e1:73:53:2d:b1:7c:
c6:60:10:ff:37:0d:bb:1d:38:03:34:00:da:b0:8f:04:54:32:
af:79:14:79:31:60:49:9d:a0:30:32:40:8d:4e:87:af:6f:85:
ce:4c:bc:5f:bf:6c:b0:a2:00:3a:9e:9e:04:2c:9f:f6:f6:66:
f0:2c:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:40 2025 by rpki-client