Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: W7y+HenPHzcwpZVHd2eZamdacr++upcdL9oyqBCs3RM=
Subject key identifier: 14:A4:42:8D:65:17:18:D4:F3:7E:45:8D:06:41:F5:78:5E:CC:ED:52
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01974B560805F6063579D1C061DF0349742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 158E
Signing time: Sat 07 Jun 2025 17:00:18 +0000
Manifest this update: Sat 07 Jun 2025 17:00:18 +0000
Manifest next update: Sun 08 Jun 2025 17:00:18 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: DgkpAkXqzxUeNwkR2AusRnbAJ8CtAjzpXae1fG+K7a8=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:08:05:f6:06:35:79:d1:c0:61:df:03:49:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jun 7 17:00:18 2025 GMT
Not After : Jun 8 17:00:18 2025 GMT
Subject: CN=14a4428d651718d4f37e458d0641f5785ecced52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:73:b6:a3:d3:4d:9c:c9:6d:d6:9e:5f:ca:
d2:85:ad:7e:1e:d4:32:73:93:dd:a7:4d:51:a9:65:
6a:ad:57:df:d4:a1:38:04:e9:df:1d:25:53:c9:54:
ad:45:1c:2a:af:8e:0e:92:b4:db:ba:f3:c6:ed:58:
f1:8b:0d:b2:c8:42:76:d1:fa:11:e6:a0:c9:45:29:
6c:46:59:06:14:89:1e:f8:d9:da:08:1a:4d:05:4f:
fc:a1:de:c3:e9:97:02:f6:6a:64:63:61:5b:e2:f1:
31:d6:d8:e8:b9:a6:a1:65:68:1a:5f:c1:c4:ca:57:
9e:05:ed:f9:28:8e:04:e6:ec:78:c6:bd:27:b0:65:
64:7d:76:24:1c:e5:1a:ed:05:ef:b2:c7:d9:3c:6d:
e5:ad:6e:d7:1f:ee:06:e9:c5:b0:b2:51:d8:1f:88:
d6:b7:af:d2:c2:28:40:e8:79:b6:5c:cd:ce:26:4a:
e9:5d:7a:b4:eb:cc:4a:e5:b0:92:74:3f:74:05:08:
a6:d4:f2:20:0e:19:c5:cb:e0:30:33:e9:11:ec:70:
6b:45:dd:6e:71:95:57:2a:01:ef:96:cd:40:f6:6a:
f9:d5:fa:e3:e2:21:cf:a5:58:39:55:ab:56:44:54:
3b:7e:2f:09:f0:e2:c1:d4:2b:ca:11:33:f5:52:0e:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:42:8D:65:17:18:D4:F3:7E:45:8D:06:41:F5:78:5E:CC:ED:52
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:65:10:20:90:27:8b:86:5a:6b:f7:c6:d0:f8:71:a0:34:
dd:3d:41:e0:f0:53:1f:d1:95:31:2d:55:12:16:e9:db:a3:28:
7e:a2:d1:a0:a5:56:0c:c4:9e:4f:8d:0b:34:cf:30:ba:c0:9f:
83:cd:c7:61:0c:6d:f3:ca:61:9d:4b:85:04:43:78:f1:c6:30:
6b:74:64:63:89:9d:65:c6:bc:b4:87:3d:76:83:b8:29:3e:65:
2f:38:a3:80:5b:de:b6:38:b1:5c:35:65:8c:fe:55:41:33:3b:
88:b5:36:f6:9c:fd:b9:85:a6:f8:ae:ed:58:7c:f4:00:b9:38:
f5:4d:79:5d:5d:73:96:05:e6:ce:ec:16:07:bf:e8:47:05:2b:
d4:be:ba:fe:bd:ee:bc:a9:3a:aa:4f:86:cf:47:f4:60:a8:79:
ff:e5:e9:a2:bf:77:da:66:49:de:4c:e6:c6:f7:32:54:3f:ab:
d1:23:ec:b1:f9:9e:84:7c:a8:59:c5:5f:cb:e4:c4:b5:11:f3:
90:0a:8e:1d:e0:0e:61:33:9a:05:6b:84:67:5a:e3:94:68:d8:
8f:2a:a0:e1:e2:c1:aa:66:7e:49:80:84:7d:b8:70:5c:69:d9:
3b:37:97:79:f3:0a:46:ca:7d:15:e5:4e:73:b9:b2:4c:a4:50:
73:83:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:00 2025 by rpki-client