Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: NQbh5Q137ucS9iVB7rORaqHJ7bfPbYeL+0ieOztIw4s=
Subject key identifier: 63:5B:78:38:7E:7D:3F:7C:0C:09:20:C1:13:72:45:A0:CD:82:3A:A8
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 019748C2D8E3953BE98644DC52956558169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 05:00:18 +0000
Manifest this update: Sat 07 Jun 2025 05:00:18 +0000
Manifest next update: Sun 08 Jun 2025 05:00:18 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: qZXUGpczHw6Gxu2nTOGOTAV1mozazUCC0zZ0Z6iftUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:d8:e3:95:3b:e9:86:44:dc:52:95:65:58:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Jun 7 05:00:18 2025 GMT
Not After : Jun 8 05:00:18 2025 GMT
Subject: CN=635b78387e7d3f7c0c0920c1137245a0cd823aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:7c:16:d4:1a:a0:57:93:32:d8:04:1d:73:
e1:80:f3:20:77:51:81:bc:a3:f6:f4:92:f6:6c:38:
4d:b8:00:93:ff:f6:63:15:d2:a0:cf:37:93:7e:fd:
4b:cf:f4:b3:1a:92:6b:55:06:c8:b0:a7:9e:5a:a2:
50:89:0e:24:51:3f:4f:e5:1f:53:9a:aa:12:e9:52:
a1:09:bd:49:20:d8:22:de:56:5a:97:22:fa:72:02:
80:4c:e5:7e:5b:43:89:eb:b8:29:9e:5c:2d:48:3a:
2e:73:cb:af:78:94:ed:be:77:7f:1b:1e:34:88:8c:
9a:53:d6:9f:d4:de:29:45:f8:91:a6:99:63:e4:56:
2a:31:a3:ff:f9:52:ba:9c:69:1c:a7:9c:2f:8c:3f:
c6:2d:30:b9:5e:4f:32:3c:cb:8b:e7:80:bb:a0:f3:
e2:ea:87:d0:c3:03:4d:27:25:57:30:ca:76:0a:7e:
18:37:80:70:98:82:db:fb:fb:c9:69:21:38:b4:49:
fa:ec:e3:9c:c3:60:56:df:b5:3f:a5:46:20:58:bc:
37:8b:64:ba:21:10:83:db:3d:fe:5b:49:16:49:c6:
4e:9a:bc:78:e4:e5:f3:85:73:f2:ad:7c:3d:d8:fe:
4f:d3:86:71:db:f3:a5:71:96:51:99:b7:62:92:0a:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:78:38:7E:7D:3F:7C:0C:09:20:C1:13:72:45:A0:CD:82:3A:A8
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cc:07:52:f1:54:fd:a1:85:95:98:c7:e4:fb:ec:32:0e:61:
02:a0:1d:1e:0c:9d:c1:8d:fe:8a:1c:2d:4f:05:78:da:41:a4:
76:18:7f:2d:f8:1e:e4:9b:cb:a1:37:c0:14:f3:80:67:00:b1:
dc:5d:e2:b7:c4:9d:24:95:02:42:ef:85:e3:5b:5d:82:99:37:
6e:f1:04:27:22:b0:35:22:84:59:c6:f0:fa:53:c8:a7:c2:65:
3a:4e:d4:b1:9e:fd:23:ab:1e:c0:29:26:b2:e3:8e:96:28:0f:
cf:df:3d:38:9a:13:e8:d4:3a:11:e0:49:48:0c:6b:3c:db:39:
96:90:eb:64:c5:43:de:81:00:d7:2b:1e:1c:c8:d0:54:8b:bf:
f7:58:8d:4b:88:cb:27:8d:7e:f1:14:89:2b:ca:75:df:cc:8c:
11:52:68:d3:ba:58:6b:93:ce:50:6d:f1:8c:7a:93:a0:fe:83:
98:28:98:7e:a8:5f:e8:2e:db:af:31:7c:d9:8b:0d:67:73:13:
76:3b:48:02:4d:2c:81:18:73:51:4c:a0:6a:8c:9a:22:95:6a:
30:4d:11:09:c3:ca:98:fe:78:7b:c0:7c:f6:62:18:e8:dc:0f:
9c:b1:1d:a2:37:79:c5:ce:d8:4e:c2:d5:d8:de:1d:18:fe:19:
d0:7e:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:07 2025 by rpki-client