
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: a7Wt12QuW7A/k2gHCPdCC0g8a021IQCddD3yLYaebAk=
Subject key identifier: CB:97:74:49:CC:39:E0:2F:8F:A7:A7:9A:85:79:92:BE:FA:5B:F2:A3
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 01974C9FAF71477A483FDEB34525DDAD0EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 23:00:22 +0000
Manifest this update: Sat 07 Jun 2025 23:00:22 +0000
Manifest next update: Sun 08 Jun 2025 23:00:22 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: pPEgpmkY3tBHWrXk3VQ2tBT4QcwbncCIyETc6gGy9Bc=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:af:71:47:7a:48:3f:de:b3:45:25:dd:ad:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Jun 7 23:00:22 2025 GMT
Not After : Jun 8 23:00:22 2025 GMT
Subject: CN=cb977449cc39e02f8fa7a79a857992befa5bf2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:b7:a1:44:a1:c5:80:e4:d7:13:ab:b2:27:
e2:65:bb:9b:e6:73:e4:fb:cb:f3:03:2b:a7:bb:82:
97:08:62:3a:a6:03:ba:85:53:e6:53:eb:c2:0c:da:
64:12:ef:4b:59:d7:9f:6c:d9:55:30:f9:14:74:07:
f8:68:b2:55:57:c8:8a:a0:f1:55:3a:3f:2c:ac:ff:
0f:16:50:be:1f:34:05:95:21:9d:e0:0d:b0:8a:47:
b6:7b:43:6b:c6:de:b2:f7:c8:c8:e9:c5:61:61:df:
df:0e:dd:32:84:f0:85:79:7b:7f:05:01:de:b9:22:
9a:fa:1a:fb:40:c0:93:98:b9:cf:4e:e7:8a:b5:a3:
18:ca:1d:1e:ba:85:d2:ab:90:6d:6c:a3:15:32:92:
f7:1d:65:83:8a:18:fe:08:48:0f:3b:82:b0:82:14:
60:7f:dc:2b:62:b7:b2:a7:36:ae:b2:3c:9a:f6:11:
92:dd:8b:89:b8:46:92:f8:de:87:9f:c2:49:a4:36:
05:8c:16:77:79:f2:9a:fd:76:b6:30:4a:87:0f:02:
46:0e:29:cb:a8:97:06:63:45:e6:1b:4f:6c:36:44:
e9:be:31:f4:b2:7c:53:d8:91:5f:62:ae:29:15:6b:
db:21:ed:df:7b:e6:4f:c0:10:b0:4b:27:6d:23:f1:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:74:49:CC:39:E0:2F:8F:A7:A7:9A:85:79:92:BE:FA:5B:F2:A3
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a6:97:43:bb:8e:ee:ff:6e:42:0d:c4:e8:d3:40:96:a4:04:
6b:7e:49:ff:ff:40:32:56:01:81:67:6f:49:42:55:68:e9:40:
b0:25:29:3e:d7:0e:fb:79:0f:be:f6:92:67:a1:b8:5d:29:00:
12:07:91:b2:0b:03:38:3a:83:9d:a0:ca:de:7f:67:cb:78:40:
da:60:f5:1c:1d:91:81:e4:98:0d:ed:27:59:0a:37:e9:23:15:
b0:6b:bf:7d:6c:4c:4e:e8:65:17:bc:78:1e:a8:7f:5b:df:a3:
b1:b2:71:6c:f4:4a:92:08:3e:be:a1:a6:05:cb:19:97:1d:fa:
da:01:cd:71:cb:95:f6:1a:db:55:43:fd:c8:eb:20:ac:cc:0f:
12:08:08:19:25:bf:c8:4c:e6:1b:e0:b8:10:45:b2:da:b2:64:
0c:b9:a7:ac:52:8a:4d:c2:f1:e7:05:60:af:10:7c:4c:2a:dc:
a2:39:e9:2b:2b:3a:d7:34:b7:4c:b8:43:a5:0a:91:79:f8:b0:
64:24:8b:8d:39:a1:d0:07:18:10:0d:21:ce:75:47:32:5e:59:
32:84:b8:ac:a9:11:c0:d6:1a:a0:7e:13:ad:72:75:60:44:d9:
fa:9a:5c:7f:a2:53:1c:03:19:00:b8:9b:12:67:66:50:65:d3:
10:18:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:22 2025 by rpki-client