Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: RA9HcGMRcGjAlLLyuBBXpOnsMnM+n2k8FVN/tsqZk+U=
Subject key identifier: 0F:A2:4D:6F:A9:46:4F:23:DD:51:AF:AC:04:9E:5E:3F:79:B2:1E:C8
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 0197470B883F85563C59480B673941C750F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 21:00:27 +0000
Manifest this update: Fri 06 Jun 2025 21:00:27 +0000
Manifest next update: Sat 07 Jun 2025 21:00:27 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: j+9sHhZyuBSECitm4R/9Ex/3cF0z0TeQlGWjBwjkpZs=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:88:3f:85:56:3c:59:48:0b:67:39:41:c7:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jun 6 21:00:27 2025 GMT
Not After : Jun 7 21:00:27 2025 GMT
Subject: CN=0fa24d6fa9464f23dd51afac049e5e3f79b21ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:1b:8a:f6:50:32:7f:9d:c9:0e:d8:8f:02:
ee:2f:7f:cd:60:d2:85:8d:b0:ed:90:d1:0f:09:09:
7a:01:89:c7:40:d7:53:d3:3a:24:77:77:cc:bd:7f:
17:fe:6b:ab:a4:8a:da:57:d8:ba:c3:6a:ab:c4:f2:
6b:e9:24:e3:a4:77:d2:27:83:42:9f:80:9b:9c:25:
f8:bc:e4:cf:cf:8b:42:dc:bb:0f:41:1a:0f:ab:10:
6a:c6:8d:2d:cd:5e:5a:07:1a:17:53:36:a7:db:4a:
2d:56:66:43:b8:9f:02:13:10:31:36:d8:52:37:b3:
3c:b2:27:ef:e2:cb:63:d1:28:9d:1d:44:d1:16:5b:
60:39:65:97:24:a4:ef:97:2f:1e:84:ef:ce:c3:9f:
dc:24:ff:ea:81:56:30:77:4a:de:f3:2e:91:4f:75:
ca:f3:25:7e:c0:cf:7c:de:de:a1:44:79:c8:c4:ea:
11:3a:42:03:9d:0c:68:05:b8:c4:13:27:13:54:c4:
e5:ae:66:c2:cc:d0:22:d9:6a:dc:5a:f8:83:a4:46:
95:2c:24:86:e5:16:15:83:ce:f5:0c:26:84:f5:54:
5a:e8:fe:30:c3:33:f0:7a:f0:f3:b4:e9:6a:81:d7:
4d:d8:99:45:0a:44:30:74:0c:8e:f4:d7:e4:14:a2:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:4D:6F:A9:46:4F:23:DD:51:AF:AC:04:9E:5E:3F:79:B2:1E:C8
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8d:bb:d1:89:cb:41:62:85:6e:02:fe:f3:3d:f9:05:ff:25:
46:71:61:d6:6a:44:cc:b7:e7:a2:4a:90:11:db:43:4a:37:89:
83:5c:af:58:10:17:76:17:45:ed:23:8e:cf:42:0c:48:6c:d3:
d9:9b:df:f5:83:f3:92:c5:b7:c5:50:a1:7a:89:a5:80:d7:8b:
95:35:5a:eb:73:f4:a9:c5:95:95:fc:ce:13:e8:bb:1a:dc:85:
65:72:49:5b:8a:3b:e7:64:4d:81:7d:44:ae:c7:32:44:e4:36:
5f:98:ff:f5:88:03:2d:6a:51:2d:21:63:d0:1a:a7:eb:1c:f7:
7a:06:fc:f8:4f:1e:b5:a0:70:c8:60:e4:71:2c:2b:99:33:17:
a5:2d:45:ae:ed:28:42:56:7d:28:ce:5e:ee:04:ec:90:5d:81:
f8:50:ad:0a:85:9f:87:4e:07:a2:03:ae:9d:55:2a:26:33:29:
61:08:ac:23:cb:6d:df:8b:f9:5f:d3:38:6d:52:88:75:a0:ce:
f7:b2:d1:ef:43:a0:61:18:4c:b4:2a:7c:c4:3f:9f:f6:33:6c:
d4:05:89:36:f8:ea:2d:d1:df:d7:ff:13:72:3a:3a:12:32:ac:
34:83:10:4f:ea:f5:f6:a5:03:67:3a:9d:11:e7:76:6d:fb:d9:
ab:f0:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:37 2025 by rpki-client