Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: 3B06TuMDTtEuIBELOpbA+BlleiUbCUz7szWXeVi+qfk=
Subject key identifier: 5D:86:3A:A2:1D:B1:C8:CD:BA:27:76:76:3B:F5:3E:04:FD:82:EC:FC
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019748FAB13B46CE9168641E741D7B250F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:01:18 +0000
Manifest this update: Sat 07 Jun 2025 06:01:18 +0000
Manifest next update: Sun 08 Jun 2025 06:01:18 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: enN2wKC2uos2/S+CHM2hcQWHmDZpgXR9hhiGHUbhBUs=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b1:3b:46:ce:91:68:64:1e:74:1d:7b:25:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jun 7 06:01:18 2025 GMT
Not After : Jun 8 06:01:18 2025 GMT
Subject: CN=5d863aa21db1c8cdba2776763bf53e04fd82ecfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:82:b4:4d:c0:30:a8:d3:04:a7:65:cc:0b:
e1:88:8c:3c:f2:e7:05:dc:d3:57:c5:83:5c:2b:c5:
bc:5e:6c:9d:a4:72:e0:77:21:48:8d:b5:53:d4:87:
8a:8e:3b:59:19:ec:c1:6f:2c:db:ee:f1:64:8d:41:
b8:05:ed:f2:63:54:6d:4c:55:7f:b7:0a:ab:5a:03:
5a:e2:a3:e4:84:84:4a:4f:12:2f:52:54:17:6e:3e:
59:a4:f0:e0:2a:6f:50:2a:56:14:c5:0e:ad:bb:a1:
a3:66:a8:b3:64:76:77:b3:4c:1f:4c:98:4a:d1:fa:
e6:b1:15:fe:15:ce:8e:28:79:73:2b:7a:99:db:fd:
1e:72:8c:68:30:41:d5:0d:31:7e:f9:0d:ea:57:da:
e9:6b:58:86:06:0d:a9:ce:08:1a:f1:5b:35:d0:e3:
9c:9f:46:e0:2f:ab:be:48:58:4a:1e:40:bd:c0:f9:
1d:c0:01:79:ae:79:f4:7c:eb:8e:50:79:48:57:9f:
0c:6a:24:00:0a:f5:9b:ef:16:c2:75:59:6e:d0:41:
3e:90:1d:d9:97:c1:93:1d:f5:81:1c:6e:42:00:ba:
93:2b:1e:a5:4b:43:28:29:db:17:01:9f:53:34:55:
7e:cf:a3:88:50:1d:b1:1f:15:ec:48:e3:5e:4e:03:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:86:3A:A2:1D:B1:C8:CD:BA:27:76:76:3B:F5:3E:04:FD:82:EC:FC
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ce:43:e5:d5:f7:de:77:e5:90:ef:2c:09:45:65:14:d7:ed:
e6:40:38:d2:43:fa:1f:8d:07:60:ab:b1:b0:17:26:ec:42:b4:
44:30:8b:57:6a:0b:23:99:db:60:c4:37:42:76:d9:e1:fa:1a:
68:1c:ea:42:60:58:4b:7c:4f:65:91:e9:74:e7:d6:3c:03:1c:
af:e2:0c:fa:70:50:46:c6:ea:53:ac:c4:65:10:a1:db:d6:ff:
5a:8a:78:a7:8c:34:9a:e7:54:0c:74:65:9a:8a:9d:0c:96:df:
e3:c9:2b:76:ac:e9:2f:de:4a:a6:3b:ff:03:1d:3c:8a:77:e3:
44:d5:fc:6e:52:a6:89:24:45:05:f9:c9:23:4d:24:b3:df:30:
6b:29:1e:06:17:c7:bb:04:64:e5:ff:d8:51:fe:be:a6:d8:cd:
15:1d:da:d4:a9:f3:26:20:c1:28:df:6f:44:15:92:33:19:a4:
a4:5f:9a:71:17:0a:a7:6f:65:7c:44:3f:fb:4e:e2:91:eb:57:
ac:06:8c:12:da:91:ea:1d:92:1b:9a:9a:d7:bc:01:87:13:8f:
76:d9:9c:f7:f6:76:23:a6:51:0c:70:47:f7:04:d8:3b:9b:e1:
fc:f4:b9:df:71:aa:66:69:57:74:c3:cd:da:7d:8a:ae:96:aa:
c9:cf:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:29:28 2025 by rpki-client