Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: muqIVynPSF3iF6B2rPE2qVh1altSXAsoUHXYcnXo11c=
Subject key identifier: CB:37:36:78:A0:C5:72:5F:06:0A:5F:56:09:BF:3F:FE:8E:D9:C9:03
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0197681766CA7E2ABFCE06577D8A7916F454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 12CE
Signing time: Fri 13 Jun 2025 07:00:53 +0000
Manifest this update: Fri 13 Jun 2025 07:00:53 +0000
Manifest next update: Sat 14 Jun 2025 07:00:53 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: d0wtQRguf5BRJ/8yqhcbw+9u7jO7sAFTaVs5uoyqhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:66:ca:7e:2a:bf:ce:06:57:7d:8a:79:16:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Jun 13 07:00:53 2025 GMT
Not After : Jun 14 07:00:53 2025 GMT
Subject: CN=cb373678a0c5725f060a5f5609bf3ffe8ed9c903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:e0:1d:f1:93:11:5d:1c:3c:b5:54:c1:6f:
f0:32:c4:50:94:ce:61:5f:b4:b0:7d:fa:3f:0b:0a:
ad:3f:90:86:a8:f8:72:84:95:14:ed:79:39:01:d0:
c9:3c:fd:81:d8:5b:1c:64:73:f2:f2:ad:d0:61:82:
72:33:bb:a9:49:ba:eb:ec:e5:9f:3d:2a:7f:31:d5:
a1:23:a1:dc:24:92:03:2b:32:67:af:4b:3f:b1:f2:
7e:b9:86:66:7f:63:dd:ae:45:f2:b6:9a:86:d4:ef:
d6:d9:a1:ad:b7:14:90:e3:93:aa:23:4e:11:17:04:
6f:79:d3:e4:54:45:31:56:c3:5a:57:42:02:28:50:
20:80:4f:2a:16:0f:90:7e:53:47:4a:51:6a:4c:50:
be:b9:26:1c:a1:53:8a:58:39:4e:68:14:52:d2:b3:
0b:67:53:17:2d:23:71:54:e3:8e:30:b5:e7:04:68:
59:0f:a1:d0:42:31:b1:c5:d9:e0:ee:52:95:2d:0a:
8e:b2:99:82:b7:a2:6e:11:22:c7:2b:73:9c:98:9e:
84:69:78:eb:9e:22:5e:8c:80:ac:af:93:9c:ed:e2:
a4:43:c2:cf:1b:3a:8c:12:89:75:92:31:02:c7:67:
ab:71:35:91:94:0e:28:7d:3b:22:cf:61:a0:13:32:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:36:78:A0:C5:72:5F:06:0A:5F:56:09:BF:3F:FE:8E:D9:C9:03
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f7:31:06:10:d1:2b:c8:8a:0a:d9:84:83:49:28:5e:e0:cd:
0e:bf:9a:69:d9:c6:0f:a3:ad:2e:6c:2a:fc:8d:6c:50:1a:ea:
c4:01:40:6b:4d:82:37:63:d5:a1:13:62:9b:b3:96:88:c8:63:
c1:0c:ab:5c:4a:97:cb:04:ac:af:1b:02:85:0e:12:e2:0c:a6:
6e:d6:5a:b1:28:7d:b9:9b:40:00:e1:3d:6a:a6:e1:4b:f5:2f:
62:c8:40:e4:14:a1:c6:84:10:e3:8b:16:3c:2d:bf:89:dc:00:
49:7d:5e:8b:8f:5d:20:05:a0:f1:73:bb:3d:ed:f4:05:0f:21:
a0:2e:9f:11:18:2c:0c:be:98:c3:dd:65:0c:24:d5:66:e5:1c:
55:dd:56:e6:27:1a:eb:26:67:de:fc:f3:25:91:da:1f:f6:2d:
61:0f:b4:03:b2:9d:3a:ba:fa:57:58:4a:ed:63:9e:c8:cf:ca:
04:5a:ad:ad:63:d9:26:db:e0:a8:71:29:de:ef:f8:bb:da:7a:
6a:ce:ad:af:4f:c0:78:74:a8:f8:30:c1:4a:12:35:db:8b:fd:
0e:c3:63:3b:75:a3:07:14:da:6e:58:fc:d0:b5:82:38:fc:1c:
3f:05:25:f0:e4:36:da:e0:92:69:0f:0b:71:2b:f9:4e:53:7d:
b1:27:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:54:56 2025 by rpki-client