Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: +msdJjPg00EKujRgqJYOF2ygMhIVuNR8qw7sz+GWLz8=
Subject key identifier: D3:1E:4B:7D:31:19:25:0F:46:2B:6F:B2:D1:11:07:C0:C5:AF:7F:CA
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 01974C6922944AA42FCD3119B922C2FAC3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 22:00:47 +0000
Manifest this update: Sat 07 Jun 2025 22:00:47 +0000
Manifest next update: Sun 08 Jun 2025 22:00:47 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: WNZBirqHdxyQjSCa85wiG35Q66HJh6WJSJ5w/X0ceAo=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:22:94:4a:a4:2f:cd:31:19:b9:22:c2:fa:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Jun 7 22:00:47 2025 GMT
Not After : Jun 8 22:00:47 2025 GMT
Subject: CN=d31e4b7d3119250f462b6fb2d11107c0c5af7fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:af:e7:0c:a1:d6:8e:1f:e7:43:6f:1a:53:
97:e4:e6:e5:ff:65:89:b8:b8:80:22:df:e4:33:cb:
32:d8:ac:74:a3:d0:9c:e7:81:80:6f:a1:50:84:fc:
31:0d:91:78:ab:55:65:15:ac:33:89:4d:d7:3b:4c:
2b:b1:f7:fe:a6:01:52:ed:f0:be:32:1e:bd:20:88:
9e:7b:c7:cd:1f:aa:1a:ef:aa:20:10:13:09:db:c1:
ab:ff:d2:31:65:9e:b5:04:57:d8:08:e4:de:83:07:
1c:be:ba:50:5c:4b:8b:15:65:c6:9b:89:47:df:f3:
a9:ce:3d:79:ac:47:d8:60:32:4a:bb:d3:26:3d:cf:
6a:af:0d:88:24:30:bf:1d:4f:50:d5:59:85:01:e0:
c2:21:33:32:c5:55:39:19:1d:77:b9:0b:e7:ab:73:
12:c5:95:a0:17:e5:12:cc:59:1b:e8:3f:04:f7:fe:
64:a3:70:da:fd:fe:97:f4:0f:26:35:fe:35:df:97:
62:60:a8:6e:f8:b5:c5:ba:7c:4a:55:8a:a5:e3:e5:
93:f0:75:9d:6a:c8:dc:b4:94:0a:81:f8:21:36:66:
f1:d6:eb:98:24:69:cb:80:89:c8:3f:4e:83:1f:98:
52:c9:0f:51:40:d6:ec:46:2c:49:68:a8:67:a3:0a:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:4B:7D:31:19:25:0F:46:2B:6F:B2:D1:11:07:C0:C5:AF:7F:CA
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:8a:2d:30:3c:94:89:86:6e:66:24:9e:0b:f1:6b:87:5a:
3b:a4:bb:06:cd:e4:8b:60:de:e4:40:93:9c:57:92:52:03:af:
75:4d:c6:79:d2:67:31:91:70:14:4b:dc:a4:71:ff:9b:19:25:
07:53:14:bf:09:33:c4:c9:78:6d:3a:b1:82:cc:4c:d9:43:82:
74:47:a0:d2:c1:2a:6c:46:25:b0:be:8a:6e:d3:9a:ac:94:d5:
62:eb:b7:65:f7:2d:6c:80:ec:65:20:91:08:d2:91:60:0a:75:
92:fc:17:82:8e:8c:d8:0a:f6:5e:74:66:32:c8:bf:ef:d9:8b:
89:e5:a3:d1:7a:51:03:89:bf:0d:be:2b:8d:87:2f:8d:d3:ca:
40:fe:88:0e:31:0d:60:ab:63:58:6a:bf:26:54:58:d4:aa:12:
1f:ae:99:f7:b1:4a:78:d5:f7:34:c0:31:5d:9e:7a:a8:8b:28:
74:19:30:4f:88:43:a6:e0:d0:a8:7a:6d:67:0b:d5:0a:32:a3:
6d:b2:bb:6a:66:0a:10:ff:ef:42:ef:08:af:e2:8a:b6:a0:8a:
04:d9:99:94:a8:ce:9e:08:c9:3b:05:a4:07:29:86:92:b8:20:
89:ab:d0:5d:2e:d4:50:f1:89:ef:53:b6:0c:75:1f:31:a3:1b:
8e:bb:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:31 2025 by rpki-client