Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: Yjl9TBnbTI2zr/pw6CGqVNCWXRxju0JHa7tobD40M0M=
Subject key identifier: 4C:F2:04:68:F5:1B:5F:D7:96:4C:54:CF:B7:1D:E1:13:0E:59:13:A3
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0197432F1226347C7AE595027649C06129D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1357
Signing time: Fri 06 Jun 2025 03:00:47 +0000
Manifest this update: Fri 06 Jun 2025 03:00:47 +0000
Manifest next update: Sat 07 Jun 2025 03:00:47 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: 5LZXmZ+8NGWXZXlQDs8u55HXosdBLZdlt91xoB8NrWA=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:12:26:34:7c:7a:e5:95:02:76:49:c0:61:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jun 6 03:00:47 2025 GMT
Not After : Jun 7 03:00:47 2025 GMT
Subject: CN=4cf20468f51b5fd7964c54cfb71de1130e5913a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:93:97:5f:d3:40:71:c9:19:f4:cd:e3:68:
b6:10:0c:f2:e8:4b:cc:23:bf:06:46:8d:01:4f:47:
83:9b:ac:8b:df:2b:92:d7:a3:90:f2:e0:1d:f3:c1:
ad:a8:86:d8:5e:55:c7:20:40:ce:86:64:dc:6a:0a:
5b:77:20:31:d2:65:bb:26:7a:23:c5:27:e0:34:aa:
50:25:de:8c:8a:73:0d:10:e5:92:33:e9:b0:18:d0:
76:04:03:09:3f:5c:ce:04:2d:2e:41:2c:19:0f:4f:
f4:08:78:5b:77:e3:82:37:c1:de:53:a1:07:f4:a5:
7c:86:97:7d:45:ab:4c:db:67:08:3c:d6:4d:4c:1b:
33:c6:3b:60:02:b9:8b:0a:ef:a7:9d:22:3f:91:68:
44:65:43:25:a3:8c:66:97:fa:1a:e9:4c:1f:33:fb:
a6:56:60:4e:84:ab:7e:3a:31:97:4e:f4:9b:22:9f:
2b:dd:69:87:97:75:25:b6:78:60:26:9e:d2:f8:e2:
b2:e7:aa:3f:7c:4e:a5:eb:96:20:e4:6a:42:8f:51:
d1:a2:7f:11:48:58:7a:25:f8:40:3f:d3:cd:4a:6e:
38:58:2b:7b:7b:7c:94:2f:f7:6d:7e:a4:46:b7:26:
2b:6e:3d:21:f6:40:21:bc:9f:9e:8b:fe:7d:ed:75:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:04:68:F5:1B:5F:D7:96:4C:54:CF:B7:1D:E1:13:0E:59:13:A3
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:8c:8b:6d:4d:1d:da:d6:d1:2c:67:3a:e6:87:42:9c:30:
37:c5:f4:4d:bc:a4:29:dd:3b:32:e5:f4:e1:60:ed:ae:87:90:
a8:9b:59:3e:de:08:33:d5:14:05:d0:42:74:6a:54:fe:f8:f3:
18:49:e2:6d:42:b8:81:9b:82:a0:8b:c7:88:53:7e:49:e2:6d:
27:f7:75:58:db:a5:ca:c9:87:42:31:66:c1:a5:f5:ad:cf:08:
54:9b:b7:a3:85:22:d2:9f:48:ae:78:af:ba:7c:c4:b0:d5:d7:
46:cc:da:1b:f3:30:bd:1b:2c:16:bc:57:b5:26:2e:87:7c:d1:
04:fb:b1:2a:76:9c:5d:3b:f3:2c:5a:12:e9:94:94:2d:fd:12:
dd:75:c4:09:d1:86:01:81:bc:f1:04:78:c3:8b:fb:19:ae:1e:
11:d4:99:fe:14:c8:ca:9f:e7:f0:f4:b0:6a:c0:55:a2:38:38:
5a:f4:cd:10:83:3f:6b:b7:c9:78:c9:de:bc:5e:b3:62:82:10:
14:9b:35:19:31:64:4e:5a:61:4f:4c:52:4a:25:3d:2b:77:aa:
fd:36:5d:0c:dd:71:14:c2:fb:12:f8:59:fd:e7:08:9a:48:c6:
67:f7:7d:4c:fc:a4:d5:77:16:a7:e6:f2:92:2f:1b:e9:1e:88:
20:aa:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:29:58 2025 by rpki-client