Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: M5ieOl8MmipuTnJzbSUb9imAsKXY/FfM1Bx+plKNkMM=
Subject key identifier: 65:1E:56:71:9D:64:DF:FE:BB:D3:38:CC:79:68:A0:43:F5:23:55:D7
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019758DAC32ED9054B20A0C50172A72186F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 08:00:20 +0000
Manifest this update: Tue 10 Jun 2025 08:00:20 +0000
Manifest next update: Wed 11 Jun 2025 08:00:20 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: 2e1/1wHQMHr5+YPYZeOiQBMRKzHpJFQ16Mvy/vbgUhk=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:c3:2e:d9:05:4b:20:a0:c5:01:72:a7:21:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 10 08:00:20 2025 GMT
Not After : Jun 11 08:00:20 2025 GMT
Subject: CN=651e56719d64dffebbd338cc7968a043f52355d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:d6:aa:68:fe:23:44:6b:ac:3b:96:ac:a3:
0e:5e:67:3a:0b:24:dc:5c:45:f0:ee:e5:41:d3:50:
fb:e0:82:d7:0f:0d:51:6a:e2:a0:5c:84:c8:ad:0a:
2f:35:41:d7:39:a8:ec:f7:51:91:f9:4a:0d:22:f6:
61:39:6b:45:72:fd:c8:5d:46:a6:7c:75:c0:0a:d2:
03:e5:40:68:41:f9:6c:c8:a2:ee:52:9c:63:6d:93:
72:56:98:4a:f1:0f:1d:1f:c8:58:e9:24:65:f9:f0:
fc:af:45:87:d1:30:b6:a4:62:ad:4f:b7:bb:8d:3d:
4b:3b:49:e2:4c:bd:70:45:2a:2c:e6:fe:73:71:ac:
e4:c6:40:84:b8:91:fb:69:4a:10:68:96:e6:79:a7:
9c:cc:0b:b5:99:9b:fa:36:2f:b6:c4:db:a7:af:c9:
dd:fd:28:6b:ee:e7:3f:36:32:e5:0f:bf:af:63:2a:
b6:f3:da:63:e1:08:1c:0f:fa:2b:39:ef:9a:9a:f5:
c1:dc:b8:c1:78:be:af:a6:4e:26:6f:90:19:82:a5:
4b:67:29:ec:ab:f4:d4:68:99:62:e0:d2:36:03:b0:
6b:2a:aa:58:36:7c:81:fe:39:e0:36:97:e0:59:6f:
b2:b9:e7:45:61:34:9d:fe:d2:d8:5b:0b:4d:77:d9:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:56:71:9D:64:DF:FE:BB:D3:38:CC:79:68:A0:43:F5:23:55:D7
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:4b:6b:dc:54:47:30:09:7e:af:42:cf:87:ca:c8:d8:41:
fe:a4:e8:e1:f8:26:a0:a2:9a:20:e7:35:5c:13:f7:b1:20:96:
a8:78:f0:e6:fb:c0:82:67:7c:b1:7b:17:c2:b4:db:ec:21:19:
4b:79:81:a1:62:1b:62:32:b7:e0:17:46:4a:55:79:25:49:3f:
69:37:4d:ca:48:44:87:a6:1d:f0:22:47:c8:9c:6b:a1:7b:27:
ea:10:0a:17:98:da:1c:c1:27:1e:e8:c0:82:90:bb:50:9f:a6:
42:8e:da:4c:dc:eb:4c:15:23:fe:32:59:6f:04:8d:4e:61:ad:
c9:01:74:e6:4f:62:76:f8:65:d8:75:f7:b8:c8:3b:ee:78:b3:
8f:3d:fa:d4:27:84:5e:8c:45:39:b0:e3:66:11:ce:df:b6:a3:
18:c6:4e:95:d3:7c:c7:13:83:a0:bf:c8:60:fd:04:2f:d1:72:
d2:24:a1:da:ee:c0:ca:1a:64:d0:5a:f4:77:41:1e:5e:a2:78:
c8:98:1c:d6:1b:aa:31:3e:98:2c:ec:8e:eb:b9:51:e9:ad:de:
7e:40:36:7f:f6:36:ee:e3:c0:37:82:46:dc:e0:31:8e:57:34:
e7:56:ec:e7:87:c5:97:82:97:e7:f2:b6:d2:7a:dd:27:7c:bd:
c0:0c:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:21:19 2025 by rpki-client