Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: WNOL5V/TDkT3liY1T4+pzrHlNBT1pKNU9mXsIN4D9gs=
Subject key identifier: 70:AD:F1:F1:22:79:09:BF:34:12:7C:E5:E9:C8:DD:FC:AB:6A:55:64
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019746D5081EB71646FB3C426B8117B9F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:55 +0000
Manifest this update: Fri 06 Jun 2025 20:00:55 +0000
Manifest next update: Sat 07 Jun 2025 20:00:55 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: ccuDMjOx8PWPbCtvPAOGqLZv5NN/bN0rI4GWi0hqQts=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:08:1e:b7:16:46:fb:3c:42:6b:81:17:b9:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jun 6 20:00:55 2025 GMT
Not After : Jun 7 20:00:55 2025 GMT
Subject: CN=70adf1f1227909bf34127ce5e9c8ddfcab6a5564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:f8:cb:66:b9:e6:dd:5f:70:c4:25:49:0f:
c6:39:6d:28:41:8b:12:00:8e:c6:14:13:d3:92:ff:
4f:f5:1d:a3:2d:a2:79:eb:69:76:a5:75:d8:2a:30:
c6:5b:72:e1:5d:9b:5b:ae:a7:14:d0:ef:79:4d:2f:
6a:e2:7e:84:06:ca:a6:90:4a:e9:d6:0e:15:e5:43:
43:87:cc:ee:26:bf:2c:04:47:63:9f:37:43:0c:0e:
f8:af:57:64:c5:23:e9:c2:a9:f0:7e:10:04:3c:f2:
a1:86:5c:ff:8e:b2:ba:6d:a4:7c:50:23:be:53:90:
50:5b:9b:94:7b:96:59:f9:42:23:66:9a:b6:9e:fd:
3c:79:f4:fb:f8:6c:dc:d7:bd:c0:26:7f:72:72:29:
3b:8a:ba:25:c5:36:e2:1a:08:33:8a:3e:8b:e0:70:
60:72:53:dc:99:8f:ff:4e:76:df:4b:c6:fa:49:86:
6e:20:33:25:5c:3f:71:b5:4b:c6:7f:51:ac:ef:16:
37:37:24:eb:28:49:4e:8f:ef:7e:9c:07:1d:a9:db:
d4:22:2c:1f:7c:50:20:25:1b:66:80:b2:9d:46:44:
06:d1:94:90:41:24:8f:56:66:47:37:99:6a:79:86:
3c:65:85:3b:b6:ef:2e:3f:00:1b:5c:68:16:c2:d4:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:F1:F1:22:79:09:BF:34:12:7C:E5:E9:C8:DD:FC:AB:6A:55:64
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:6e:42:65:c9:19:a1:4f:7c:ad:5e:65:9b:86:5d:82:83:
a6:8e:42:8a:de:2e:19:1b:ac:5f:13:bc:e1:37:42:92:ef:99:
ab:82:4c:9a:7f:4a:bc:ca:53:63:b9:dc:92:60:55:6d:92:b0:
76:b8:da:0f:47:0b:7d:87:62:46:0a:f6:fc:a7:4f:c0:e2:1b:
ea:21:9f:e9:8d:d8:41:97:72:ca:70:36:a0:a5:aa:be:77:fb:
18:81:d1:5b:23:38:41:fc:9c:df:1e:86:b0:d0:76:a6:78:ca:
00:95:0b:6d:fd:74:f1:30:2d:5c:f8:f8:ea:bd:db:63:ec:d2:
c4:ee:15:71:bd:15:71:89:78:5a:cc:af:bb:1f:d4:0a:81:e2:
bc:8a:50:da:49:3a:b8:9b:50:e3:c5:68:83:d0:28:1f:df:a5:
73:37:93:a4:41:e0:71:97:63:73:2e:56:02:23:5c:a8:37:7a:
7d:4c:1a:b1:3b:5a:ed:80:1d:c1:2d:9e:d6:99:04:fe:db:cb:
7c:b6:c8:9c:8e:48:43:8a:e3:71:1f:af:18:41:cb:b0:71:b6:
41:01:06:41:24:57:f2:f3:88:b1:67:19:f5:0d:26:98:47:b3:
56:22:96:d3:e1:cf:87:86:b0:6b:8b:98:b7:13:6a:74:1d:ed:
ec:e5:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:12 2025 by rpki-client