Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: mPmjyYYKUrIm+IOYoN7iNjAKJmy4ThCJnqrMFCjBCoc=
Subject key identifier: 9B:C1:58:F3:8C:57:51:34:F3:A9:1A:4F:3A:E9:1B:D8:8A:C9:B8:00
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 0197470C3BD5C4A3FE0D77ED96F017A48F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0CB2
Signing time: Fri 06 Jun 2025 21:01:13 +0000
Manifest this update: Fri 06 Jun 2025 21:01:13 +0000
Manifest next update: Sat 07 Jun 2025 21:01:13 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: 7qzkiFM2ovlFhEu4WEMU6ZUaQxYkT3MXPqSb3JwkRw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:3b:d5:c4:a3:fe:0d:77:ed:96:f0:17:a4:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jun 6 21:01:13 2025 GMT
Not After : Jun 7 21:01:13 2025 GMT
Subject: CN=9bc158f38c575134f3a91a4f3ae91bd88ac9b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:f1:c2:ae:3b:e6:b3:79:23:ef:9d:77:52:
1b:13:37:64:d6:ac:e3:dd:20:ec:de:a0:08:0e:8e:
ac:1f:de:2b:1b:87:65:68:ad:e6:36:e1:1d:45:1d:
9e:3a:44:e5:10:6c:01:56:a5:a4:e5:4f:27:f7:67:
53:bf:59:7d:60:42:18:cc:0c:41:c0:f4:e9:08:3f:
c0:e8:28:65:b5:e5:f9:8b:96:66:11:1e:ec:c6:9e:
dc:a5:1a:79:65:d8:f6:aa:a9:4f:98:a5:22:77:a0:
e6:a6:f0:c7:c2:63:de:f1:1b:e1:b3:bc:58:6d:4c:
11:48:22:ed:a4:c8:9e:d7:e8:50:30:9f:13:db:5d:
23:c3:9d:3f:60:a9:ed:8e:a6:31:bb:9b:64:17:b6:
3a:42:90:43:d8:75:33:b3:ce:38:42:b7:87:d6:72:
6a:ed:15:c5:97:0a:36:bc:f7:75:68:6c:c6:4d:82:
b9:7f:b9:7b:2d:c3:8d:d3:89:51:09:43:cf:e1:ce:
be:35:0c:dd:a3:ed:34:43:bc:b7:3d:94:4b:45:4e:
be:42:fb:97:4a:6d:e1:1b:5b:db:cf:0f:bd:b5:34:
91:56:51:07:31:77:6f:4d:9a:23:03:75:ac:c3:b1:
ed:13:46:97:02:90:f7:0b:d9:74:1f:6a:ca:4c:4c:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:58:F3:8C:57:51:34:F3:A9:1A:4F:3A:E9:1B:D8:8A:C9:B8:00
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:ab:be:f8:ed:59:9e:3b:22:28:e9:38:b2:6e:4e:d4:de:
8c:1e:fc:ac:6a:db:e8:8b:d5:c9:ab:f3:18:1f:57:12:22:fb:
ef:4e:36:a1:5c:04:42:3d:a3:92:b8:3f:9a:09:ad:e9:fb:84:
74:e2:8d:05:9b:22:38:a5:56:37:b9:19:7e:0f:d8:f3:59:d7:
e6:6b:3c:3f:45:5b:93:a7:11:16:e2:fb:32:6d:24:0a:b9:7c:
42:74:4a:c2:5b:99:4e:fd:18:28:a5:f6:96:1f:e1:74:4d:98:
c8:ce:c6:86:02:f6:e6:a7:03:c3:bd:14:4b:1f:15:39:da:db:
49:6c:08:43:1b:09:d0:39:bf:9d:82:ba:19:3e:da:f9:7a:eb:
c7:dd:fd:26:aa:dc:5a:93:ab:d3:bc:cd:53:62:b0:42:33:61:
7c:30:18:ef:81:55:83:ff:6c:29:6c:ea:10:9f:29:3b:2f:cd:
77:36:22:47:89:e9:66:a6:2d:0a:db:51:69:5a:7e:14:e0:78:
da:b1:78:41:ef:3b:aa:db:bb:af:8f:45:22:57:eb:c2:a2:cf:
67:cf:45:e5:bb:5e:84:74:62:45:6d:72:74:e1:c1:8d:ea:93:
78:74:99:c9:fc:f6:9b:7e:16:12:3f:e8:7e:e1:9a:87:93:95:
94:15:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:40 2025 by rpki-client