Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: bd/nuaxOuxBMMNLg5KbQ3oiWCqfk/rUAzbHUxinE1Ag=
Subject key identifier: 95:F0:9B:56:A1:FB:F5:63:FE:C4:6C:87:A5:A8:21:8E:D1:E7:8D:55
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 01975E381ED6D22CC686C08511E3BDCE612A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 0633
Signing time: Wed 11 Jun 2025 09:00:25 +0000
Manifest this update: Wed 11 Jun 2025 09:00:25 +0000
Manifest next update: Thu 12 Jun 2025 09:00:25 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: 3p8cRYmGRtrZAC4ajGJV9oxrRgL3W1b4vRGWPKAbyzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:1e:d6:d2:2c:c6:86:c0:85:11:e3:bd:ce:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jun 11 09:00:25 2025 GMT
Not After : Jun 12 09:00:25 2025 GMT
Subject: CN=95f09b56a1fbf563fec46c87a5a8218ed1e78d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:6d:55:75:27:e2:cb:0a:8b:58:f6:7c:4f:
fa:b0:bc:ab:fd:7d:df:88:62:91:73:95:3c:f2:65:
8a:c9:14:3a:8f:f0:51:3b:70:7b:05:77:a3:9e:77:
49:f6:59:45:75:1c:dd:64:68:a4:66:df:e5:cd:c2:
ae:16:b7:c3:b2:c6:ac:02:db:12:fa:a8:fa:54:7c:
5b:6e:da:06:cd:2d:d0:18:88:5a:af:30:40:fd:a8:
df:be:39:e2:db:66:07:8b:49:b8:e7:18:86:57:05:
36:f1:8b:80:6e:84:f2:fc:09:ca:d0:ae:ba:3b:b6:
29:ae:bb:e5:01:cc:ca:b2:2f:04:f9:56:e2:bc:5f:
22:97:56:66:63:d3:91:55:f7:18:4f:76:0d:f7:91:
f8:e5:41:6e:85:4e:bf:85:a9:e2:0c:b4:78:ab:a9:
05:c8:4c:45:f8:5f:7a:39:e1:9c:c4:d0:3e:44:99:
ba:a2:7b:95:fb:79:4a:2b:91:ed:ad:4e:93:ad:47:
3b:91:e9:bb:4c:4f:fc:d3:83:48:04:6c:f0:37:9c:
76:71:f2:d5:52:95:e5:c4:e3:b2:4f:7f:68:27:ee:
24:3b:7d:a6:9d:85:41:57:f4:b9:91:8d:e8:05:6c:
05:15:a4:89:ac:f2:6e:0c:a2:99:e5:e3:a2:0e:35:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:9B:56:A1:FB:F5:63:FE:C4:6C:87:A5:A8:21:8E:D1:E7:8D:55
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:99:58:da:79:4c:34:6e:14:90:6b:e1:8c:27:5b:28:24:
4b:03:15:c8:e6:15:ec:13:47:5b:2b:0d:15:f0:83:be:ae:54:
22:54:83:27:0e:8e:bd:e7:cf:25:60:ce:5a:3a:50:8e:be:b4:
2b:53:fc:06:1f:0d:17:af:00:53:b2:c6:00:c8:6a:14:fa:e5:
e7:9f:af:b3:14:1a:ab:11:dc:8a:a0:bd:11:3f:32:a3:e2:9a:
16:40:47:be:d7:7b:f2:2d:42:ab:89:04:ba:39:72:e5:0e:bc:
1f:3d:0b:ed:1b:d8:bf:c2:75:26:d9:20:aa:0c:10:09:d1:d3:
d4:85:3d:73:f1:93:21:88:a8:a2:b5:a5:78:2b:15:a5:99:e1:
a1:61:1a:74:04:68:77:dc:76:35:d9:53:b1:04:b6:15:50:35:
d7:95:f1:e6:91:64:4a:cd:d3:3d:2d:6e:2f:df:7e:e3:ce:a9:
f4:0d:3e:17:c1:24:f8:76:11:35:64:a9:3e:20:f4:7d:4f:83:
db:a7:0e:66:d0:d9:67:be:8e:12:3c:e5:cb:38:a9:ac:28:03:
a9:2c:33:9f:07:ea:c6:34:c7:bb:b8:17:db:7f:8f:5b:7b:78:
df:50:ee:f9:52:9a:98:5b:31:c1:6c:c1:a6:94:d3:c4:bd:22:
71:c2:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:34 2025 by rpki-client