Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: waH753PHerEnNRJdo8Hg7yneuRiXaQVksgc+LXann5g=
Subject key identifier: 17:FD:27:1A:49:B5:05:B4:05:56:CE:BC:DD:5B:12:1F:3B:42:EF:27
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01974A4371E0B038D83C510E406CB131A3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1593
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: GQbSTLRntHK+hB+c+gBOum0N3cywMxa7au9mXQfdYsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:71:e0:b0:38:d8:3c:51:0e:40:6c:b1:31:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=17fd271a49b505b40556cebcdd5b121f3b42ef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:08:40:ec:53:ed:5c:c8:53:49:e1:0c:1a:
a3:74:14:1b:5b:bd:85:d1:98:c5:14:70:96:d9:75:
28:a9:89:3f:0c:6e:49:d0:04:ff:ca:d8:6e:c3:f3:
86:05:95:2d:26:ea:4d:37:25:d1:34:84:39:ab:3a:
fb:a4:34:ed:46:e2:d7:5f:94:04:a9:83:f0:fb:ed:
9a:fc:e4:2e:dc:6a:a1:6d:98:30:45:a2:ca:66:db:
bd:1d:07:6a:ac:b9:9a:ac:63:b3:82:95:74:64:04:
94:ae:d1:3c:c3:b6:f4:2e:c7:9b:54:21:1e:9a:86:
26:fd:d2:53:42:69:50:21:ea:2c:02:4e:e2:6e:65:
fd:c8:3b:24:c9:92:ab:c4:75:06:f9:43:c3:5a:09:
97:7c:13:7f:b3:19:38:27:fa:2c:08:15:e4:07:2e:
14:b5:f8:cd:81:37:f0:a8:46:a7:8a:35:70:a8:0b:
4f:03:43:27:36:7b:9c:3b:ea:de:9a:9c:9a:d5:b1:
70:a1:de:16:dd:f0:55:6c:13:04:49:1c:19:cd:3d:
c3:0c:71:a7:83:03:a1:9c:b3:50:02:de:35:4e:d9:
8a:63:b2:52:b2:9c:64:49:ed:ed:7c:51:a5:03:5c:
f8:ae:cc:22:fc:e5:34:9f:ad:ac:16:e8:85:b6:0c:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:27:1A:49:B5:05:B4:05:56:CE:BC:DD:5B:12:1F:3B:42:EF:27
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:31:b1:76:0b:2c:e1:90:b5:f5:86:77:24:1f:6e:85:eb:
bb:53:be:f0:97:4e:1c:88:8a:a1:49:3a:82:20:ad:10:46:4e:
c6:97:42:8d:4d:92:2d:f7:14:77:bb:b6:ed:3b:b9:9e:9d:55:
53:ce:ba:f9:56:be:47:fc:de:34:8e:5b:47:2e:7e:0c:7f:21:
6c:cc:98:a6:23:99:a9:2f:19:98:39:0a:a0:82:0a:37:44:2e:
45:57:19:fa:a6:cf:f4:32:5d:9d:a8:81:a7:4f:78:9d:cd:91:
05:00:df:5a:ac:2b:7d:54:5d:c9:5d:c3:4b:10:e6:1c:57:f2:
97:04:d0:db:66:01:63:e3:94:44:54:0f:49:7c:65:fa:1c:9f:
1f:97:73:fb:53:c4:05:a1:9a:35:fb:c7:0b:e1:67:94:e3:22:
69:b2:6a:e8:c0:99:34:9c:81:ee:c9:da:b2:ea:94:40:96:46:
6d:eb:87:74:49:5e:7d:ba:5d:20:df:60:ba:3e:80:0d:d7:12:
04:21:6c:68:94:49:20:f2:5c:95:da:41:00:f2:61:64:68:23:
fa:42:17:02:7b:34:a7:e2:e0:6d:b8:83:55:bc:6c:38:29:3f:
ce:15:a0:c4:a2:71:a5:e8:7a:fa:c7:36:7a:6e:b5:46:95:e3:
7c:f6:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:34 2025 by rpki-client