Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: qj9oB8wxfx9MVDPKSP0eLYjpR4GqjDiks40Nuha+a1Q=
Subject key identifier: 43:4E:E9:A4:1B:9D:5D:A6:DA:09:14:3B:70:9E:07:03:CE:8B:10:30
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01974779F91FDEAFC316567284CBFDC3F337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 1403
Signing time: Fri 06 Jun 2025 23:01:05 +0000
Manifest this update: Fri 06 Jun 2025 23:01:05 +0000
Manifest next update: Sat 07 Jun 2025 23:01:05 +0000
Files and hashes: 1: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: 6qI+DLB9taDV5d6A/dYaV6jZAf4QAHYZcXcfQLk1rXM=)
2: L_dIoL-v8Ses7NHNA9_hOVuTcYA.roa (hash: spjcPc+t+vh7tkw91Ed++bnrR9F1eRl6ADtzWUxuTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:f9:1f:de:af:c3:16:56:72:84:cb:fd:c3:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jun 6 23:01:05 2025 GMT
Not After : Jun 7 23:01:05 2025 GMT
Subject: CN=434ee9a41b9d5da6da09143b709e0703ce8b1030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:04:72:57:95:c1:7f:93:ec:d9:f6:5d:ec:
6d:72:d0:c4:65:0b:cc:3c:1e:3b:5f:f5:0b:e4:d2:
b2:f0:5e:06:15:12:4c:78:a1:07:8d:a9:fd:8e:24:
91:bb:63:3b:ab:0b:34:b7:c9:ec:0d:01:c0:b9:fe:
b8:63:6c:08:5b:40:d2:5e:97:74:18:95:2e:24:6c:
9c:4c:a4:6b:43:7a:18:4c:cd:a9:b9:b4:58:90:f1:
61:fd:4e:51:bb:b0:cd:f0:c1:ed:dd:96:7a:2c:d5:
a7:2c:80:b4:1f:9a:f2:dd:61:66:50:40:9f:94:46:
95:75:ae:22:99:18:17:dd:38:3c:58:a0:ad:e9:58:
64:23:46:34:68:d5:4b:57:22:65:b4:38:e9:9c:4c:
f4:2d:7f:f7:f3:32:66:94:28:b7:a5:d4:b0:97:5a:
c0:f8:cd:80:2c:c0:3f:ed:ae:36:da:76:9f:79:ef:
c5:e9:80:2b:5b:45:0e:ec:55:92:d7:b3:5f:d3:55:
e9:36:f4:39:5f:b2:6b:f8:b9:cc:38:99:05:5d:56:
e8:d3:e7:8a:51:c1:35:3e:20:6f:1f:8c:43:86:d8:
41:16:ff:38:1b:50:a7:fb:d1:3e:a7:d3:17:96:f8:
eb:68:ed:fd:36:74:6a:1c:14:cf:29:88:8d:08:4b:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:E9:A4:1B:9D:5D:A6:DA:09:14:3B:70:9E:07:03:CE:8B:10:30
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:fd:f3:cd:e3:32:8a:7f:f9:c5:8b:08:88:dd:1f:0e:6b:
15:34:3f:6c:6a:e6:d6:ec:90:e3:ed:83:0d:c7:ec:5e:06:b3:
1b:30:9a:73:5d:6c:b7:ca:e7:5e:3f:55:c6:fc:8c:22:62:74:
28:b6:a1:9c:65:e7:e9:48:6e:84:4c:c0:c5:cd:d4:5d:78:9f:
cc:1f:55:16:c9:4e:4f:a1:40:ae:54:3f:1c:98:dd:e8:a8:8f:
63:de:bb:a9:64:3d:a2:6e:b7:f0:0c:f6:00:ea:95:37:49:b5:
1d:0a:55:26:91:38:6d:6a:02:f2:4d:fd:49:08:80:48:1b:fd:
e9:0f:75:5a:ef:97:2a:3a:5d:d3:0d:5a:7d:67:44:39:2b:71:
6a:4f:94:e3:15:5d:ae:b7:ac:b2:b7:63:50:15:4d:94:c2:e5:
dd:66:fe:62:85:d8:ff:33:c5:69:22:be:9f:26:29:8e:2b:73:
0a:8f:48:c7:2c:63:7e:61:2a:37:89:06:e4:14:19:55:12:1e:
95:02:7e:45:3c:0b:5a:c5:fb:8e:8f:a9:26:76:f0:74:e8:c9:
22:06:26:91:b7:78:0b:9c:91:19:56:ae:ad:e1:5e:30:84:e4:
b1:a6:77:27:32:b9:6a:12:fd:c6:37:ac:f3:4d:b2:cd:e1:49:
51:be:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:26 2025 by rpki-client