Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json)
Hash identifier: UXXv5sYSSZNFDQfxmTzYdt46WNCnVUX/hAdUUlWk8/4=
Subject key identifier: 1F:A1:A4:E2:FB:70:61:50:EC:F3:93:FA:58:49:A6:4E:61:51:AE:22
Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Certificate serial: 01974AB16A4A3740415CD6072FF875A768E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
Manifest number: F0
Signing time: Sat 07 Jun 2025 14:00:30 +0000
Manifest this update: Sat 07 Jun 2025 14:00:30 +0000
Manifest next update: Sun 08 Jun 2025 14:00:30 +0000
Files and hashes: 1: WReM2adAhR_LtpNyhGqyNjE1Y4M.roa (hash: CfgqMj+xDVkXamVtZy6LM6aMe3AmsivTTFfgXAb+rPQ=)
2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: eT9fAMZgx4vdef1FiWiBcdloz+6EzpaJt+obdBWbgO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:6a:4a:37:40:41:5c:d6:07:2f:f8:75:a7:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Validity
Not Before: Jun 7 14:00:30 2025 GMT
Not After : Jun 8 14:00:30 2025 GMT
Subject: CN=1fa1a4e2fb706150ecf393fa5849a64e6151ae22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:25:fd:3c:b6:9d:99:e8:66:cb:cb:53:89:
25:0a:38:34:ea:61:2f:9e:b1:4e:b8:da:7e:c8:28:
40:34:9f:d5:69:cd:1f:ad:86:ea:ce:8d:ae:7d:37:
19:36:45:f9:0e:a8:15:0b:52:8b:bd:3a:55:5d:8f:
52:10:37:e3:5e:0b:15:e1:bb:d4:a9:34:62:85:19:
f4:0e:d8:1c:e5:db:6a:9b:5f:88:c8:fa:f5:e5:72:
4c:89:ee:9e:27:fd:a9:16:52:cc:2e:79:9a:d2:af:
ce:72:9f:90:cc:89:f2:42:82:47:7f:d6:b1:1e:68:
c0:72:bf:08:46:46:82:c5:b7:14:76:10:4b:cf:0d:
94:09:8a:d6:f5:88:48:92:03:64:d7:a6:11:87:16:
c2:e8:08:eb:a1:df:72:fa:5f:a8:f8:f0:79:62:9d:
70:ba:48:aa:7e:a2:b8:58:50:d0:34:1e:ad:47:3c:
42:e9:dc:9d:3c:d3:13:ce:c1:21:a0:fe:1c:94:c0:
4d:e2:66:ac:97:09:c5:01:09:30:e6:c9:b5:d0:82:
5b:88:d9:fa:94:b8:41:3b:39:aa:d5:43:9d:7a:69:
0b:f1:47:c6:2a:89:1e:c6:8d:0d:85:d2:50:67:62:
e2:e8:a1:e2:02:8e:04:1d:b3:33:da:bc:39:fc:de:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:A4:E2:FB:70:61:50:EC:F3:93:FA:58:49:A6:4E:61:51:AE:22
X509v3 Authority Key Identifier:
keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:15:50:fb:29:3d:89:79:f8:3e:8f:01:40:72:05:21:a1:
9d:0f:a7:8e:c1:5c:6e:7f:c9:13:fc:c7:33:7f:d0:24:1e:72:
70:8a:ef:45:a9:05:95:2b:ff:30:40:74:4f:c2:33:92:69:b9:
7e:3f:fc:8c:f1:f7:29:57:f2:13:85:4b:a5:f2:5a:d1:f0:1b:
78:ac:e6:92:e8:fd:aa:1f:e7:cb:ab:d0:36:d3:18:15:ee:dc:
e3:89:2c:1d:0e:21:ff:f6:8c:85:87:37:2e:d6:0d:2f:12:29:
54:63:f8:91:62:b5:f9:fe:44:43:bd:d7:c2:d2:fc:fd:c4:70:
e3:d0:3a:68:8d:74:82:e1:01:6a:54:03:9c:7b:25:d3:52:c1:
dd:e1:21:61:ab:10:b2:e8:2e:5c:a2:57:50:f5:a4:4b:2a:fb:
a9:67:c8:e7:ac:71:f2:82:4f:8f:a6:83:ae:a9:a1:14:c6:2c:
d3:08:ac:04:bd:b0:16:c7:19:c5:ed:78:e2:28:af:88:bb:11:
41:bb:64:3f:b1:af:ba:ed:71:89:6a:49:f3:af:82:48:f0:a0:
e5:37:6f:31:d3:70:7a:9c:16:d8:bf:27:d0:9d:d9:70:10:05:
82:89:2e:df:83:27:d6:ae:3a:bd:38:f5:2e:c1:b4:8e:ee:ec:
81:ab:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:14:13 2025 by rpki-client