Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: Iwj9mYdXL/sY1Tptd91OF4WXlpTkZ4a0/+0iiJEyqYE=
Subject key identifier: 07:30:61:05:FE:C4:BD:CE:72:C1:1C:8A:7F:1E:FA:B9:EF:ED:5C:F8
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01976EF4FF83FA7D1EB76C406B394786C050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 15:00:39 +0000
Manifest this update: Sat 14 Jun 2025 15:00:39 +0000
Manifest next update: Sun 15 Jun 2025 15:00:39 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: AeMFzu+1xZ9fnJ32RykT5ANWswEGb5FMjHCJQLwsw78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ff:83:fa:7d:1e:b7:6c:40:6b:39:47:86:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jun 14 15:00:39 2025 GMT
Not After : Jun 15 15:00:39 2025 GMT
Subject: CN=07306105fec4bdce72c11c8a7f1efab9efed5cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:34:0f:b5:68:e7:16:5e:05:09:43:0d:c3:
90:ed:21:36:16:21:b3:90:98:42:ae:53:9e:7b:19:
39:c8:a3:c8:41:d1:50:ed:7e:6e:ad:1b:f9:1a:78:
f9:ec:33:45:b1:3c:db:4c:2b:ae:03:ef:0e:98:d0:
c1:37:ce:94:e1:e4:14:d6:fc:7a:d1:b4:ee:fc:3f:
bb:1d:03:5c:19:47:d5:fe:1b:f5:1d:71:98:60:34:
5e:25:26:4a:47:31:d4:e5:0c:17:51:b2:7e:73:3e:
1a:c0:35:ce:18:19:29:4b:85:5b:57:b8:c3:91:82:
ec:5b:ab:77:52:3b:2a:38:02:72:bd:69:e3:7b:63:
c3:05:77:62:69:53:cc:d6:41:85:31:a7:d7:c6:05:
1f:02:76:1c:29:79:7b:62:e9:61:04:f8:b0:ff:4e:
7b:c2:93:91:91:79:e7:d4:8e:27:65:37:c2:71:f7:
46:77:85:d2:2c:d9:05:e6:b9:df:91:c8:c7:b5:a0:
43:0a:b6:bd:5b:d3:e1:63:bc:18:9a:f1:94:1a:c1:
62:8c:85:a1:48:7a:67:08:29:78:f2:5c:b3:39:87:
29:f9:b9:de:7f:bc:74:8f:60:d9:75:15:aa:33:ff:
0f:35:8a:fc:cd:1c:41:d0:9c:94:a1:31:ee:88:09:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:61:05:FE:C4:BD:CE:72:C1:1C:8A:7F:1E:FA:B9:EF:ED:5C:F8
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5e:93:18:bd:e8:75:00:32:78:5f:82:7b:ef:e5:09:d5:32:
df:aa:79:76:29:d5:b6:2a:03:e0:27:fa:f6:3b:ee:7f:e5:70:
d4:32:13:27:3a:26:ba:e0:f6:48:50:0f:59:9f:99:51:b1:ba:
f0:2f:b9:eb:65:e2:42:c8:ed:c1:29:8c:8a:d2:0f:f4:3b:51:
00:25:44:50:20:c9:db:3c:1d:38:ee:21:df:11:b0:a1:fb:e5:
74:f4:c8:94:b4:64:32:72:4e:cb:75:71:d9:60:01:f1:c3:2b:
b2:75:54:fc:32:60:b5:4d:79:7c:62:a0:6c:cf:d9:2d:fa:f0:
64:96:00:44:16:da:16:fb:70:9a:d5:c8:1b:75:3e:be:1c:fe:
78:30:67:57:d6:31:95:a4:52:a2:38:cd:92:2f:fd:53:bd:d1:
af:26:a3:4c:9f:2f:c5:5a:fa:f0:7c:ac:fa:41:98:bf:59:dd:
35:b6:30:ea:e4:47:ab:40:2a:43:06:d5:c8:95:70:3a:24:09:
ad:6b:ce:59:db:1d:f8:7e:81:83:20:00:e4:0e:f1:67:95:93:
b3:a9:5e:a7:fe:a7:88:e6:2c:a5:40:8f:72:cd:44:cd:0c:ad:
10:50:d9:53:d6:22:f6:89:04:41:a1:bd:ef:8f:52:db:11:4a:
18:8e:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:00:27 2025 by rpki-client