Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: MUeFGOeB1P9h7GeEZ5plFW84pudYcl6KH0u/lMP0jgM=
Subject key identifier: 4D:41:5B:39:22:43:E2:8F:D7:D7:2E:B4:35:DD:CA:A4:43:0A:08:E9
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 01974BFB4E3E54DB3C2FEB55E833A777AFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 20:00:50 +0000
Manifest this update: Sat 07 Jun 2025 20:00:50 +0000
Manifest next update: Sun 08 Jun 2025 20:00:50 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: TPHTOi+8oomzvX3ezzqFCkOGI0NH/yJbw3BscB4Rbh8=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:4e:3e:54:db:3c:2f:eb:55:e8:33:a7:77:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Jun 7 20:00:50 2025 GMT
Not After : Jun 8 20:00:50 2025 GMT
Subject: CN=4d415b392243e28fd7d72eb435ddcaa4430a08e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:bc:8b:01:5b:a9:93:d0:a8:f4:af:1a:0e:
75:bc:72:b7:0d:34:fc:fd:5a:dc:18:34:77:26:89:
59:c2:6c:be:83:f6:92:c5:08:07:da:52:99:dc:65:
18:f5:fd:57:2c:da:19:24:3f:01:d5:de:e7:46:22:
4d:84:a4:6b:22:42:98:5a:b9:d0:3b:eb:ed:d8:26:
d3:64:90:51:c6:a7:43:cc:93:cb:53:4b:f7:31:cd:
6b:a2:73:ea:0f:8c:68:ba:00:0b:fe:da:fa:9c:69:
31:34:3d:39:ce:79:e5:c7:d3:23:ad:fe:71:e4:9f:
9c:0b:8d:99:94:a4:53:c6:de:a0:b6:9a:9e:fb:6e:
d2:b1:82:3d:41:ff:b9:20:c2:1d:3a:bd:3d:68:37:
4c:65:c4:e9:72:74:43:c4:15:a3:21:04:e4:d5:ce:
50:40:69:c6:7d:69:89:bd:7a:99:0a:3c:2e:3f:12:
1f:83:41:45:36:e7:ad:b6:d4:98:15:bc:7a:9c:4a:
9d:ad:87:ae:e8:a4:58:6c:f9:75:ce:e8:05:f5:cd:
a1:9c:83:9f:21:79:2d:9a:eb:ab:fd:73:70:a4:06:
54:96:dd:2b:a5:3a:ed:f9:f3:d5:63:b8:09:b0:8a:
41:ba:66:b3:b4:73:42:3c:f2:a4:e0:2a:ef:c8:51:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:5B:39:22:43:E2:8F:D7:D7:2E:B4:35:DD:CA:A4:43:0A:08:E9
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f3:de:c0:19:c2:54:71:6e:5b:80:e1:7e:c9:a9:de:cd:f2:
a1:6d:49:eb:17:f2:ce:08:13:72:a7:fb:b2:6d:ce:99:7b:aa:
86:8d:92:45:17:88:4f:9b:96:a6:59:fc:b1:8f:f6:cf:37:08:
a4:e1:13:00:82:a9:c5:68:86:19:66:6e:b6:68:0a:15:55:2b:
40:3e:f0:67:2c:a6:a4:83:e5:7d:d8:e1:d6:77:27:b4:0f:bd:
f8:8e:e9:0f:e3:b0:1d:9a:5d:99:06:e9:bd:30:cc:40:ea:f0:
82:e9:ba:3d:07:7f:61:ae:4d:60:7a:cf:e7:49:af:50:7e:84:
33:ee:bd:50:6e:7f:00:9a:80:4b:2f:db:81:56:8f:81:72:a0:
92:6c:de:40:e0:af:40:69:71:df:9d:30:4c:41:76:08:f1:a1:
8f:dd:03:dd:3d:f6:3b:de:74:de:2d:b8:0b:b9:ac:85:5a:66:
cc:0e:f0:a5:06:cf:f6:b1:0e:d1:7d:b3:3a:0b:f4:05:31:11:
ce:8c:48:c0:e4:00:1a:36:0d:43:b1:f5:e3:94:1e:fb:1b:cc:
51:60:2d:27:6d:a9:0a:77:62:62:dd:10:f3:af:20:40:df:14:
14:88:cd:1c:41:df:3a:88:12:04:48:19:df:4d:62:7a:07:ab:
3f:04:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:27 2025 by rpki-client