Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: e+OIZXfLTY0JuzFc/SK7E6F8FM9pT8WHBsVZ9zmne/4=
Subject key identifier: 74:DA:89:B2:56:10:32:79:04:19:A6:9C:8D:A9:98:CE:4A:31:8C:07
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019748F9E98EF412DC47658987969B4DDC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: JhbqjNRxhfC6Qrj/CgI+HOGOCNhTHLemGgKSTcYWb8I=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e9:8e:f4:12:dc:47:65:89:87:96:9b:4d:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=74da89b2561032790419a69c8da998ce4a318c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:b5:68:ef:dd:80:18:e2:b5:44:39:dc:99:
c0:02:8d:2e:2d:93:3e:36:ba:e9:63:18:b7:3f:e5:
59:0a:a9:ed:89:25:02:20:98:8b:64:c3:da:b3:94:
71:08:8d:f4:0a:96:66:c3:e4:f8:d6:62:0a:66:4d:
b8:f7:de:ef:e4:cd:e4:a6:16:4f:95:a9:c7:48:b0:
4c:07:fa:e9:87:48:b6:ec:d0:ea:b3:33:26:bd:df:
5c:a8:bb:5e:39:96:e8:ac:ef:4b:eb:21:c6:80:f8:
58:3a:d8:d8:37:5f:64:44:b3:9c:0b:51:06:46:a3:
43:b2:12:df:cb:d4:77:a8:94:7b:5b:d9:ed:11:b0:
4f:69:2e:7d:08:fb:a0:52:06:f1:11:f8:ae:ab:be:
9e:3f:1b:7c:f8:86:02:99:5d:92:b0:22:19:9b:aa:
d4:a7:7e:cd:c0:49:9a:e6:6f:a8:20:7c:31:05:37:
d6:1e:97:67:11:c8:7c:47:49:86:29:23:b1:88:64:
32:eb:ed:ad:3f:ff:4c:67:40:81:d4:5d:08:6b:70:
f5:1c:1c:09:76:cc:fc:26:ae:8b:7b:05:ad:de:b1:
12:ea:7d:30:fa:c6:25:b5:19:76:52:50:f5:93:52:
68:88:42:3c:d9:cf:b9:c9:07:ed:6c:34:e7:b1:d0:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:89:B2:56:10:32:79:04:19:A6:9C:8D:A9:98:CE:4A:31:8C:07
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:53:9a:e9:cb:b9:8f:2b:9d:03:11:90:b6:f0:c9:08:ab:6e:
27:ee:02:95:87:cf:07:29:2e:27:f5:1f:ac:58:e4:1a:79:37:
7b:15:02:ef:1b:75:04:28:5c:b3:81:a4:3a:65:1e:04:01:50:
89:8b:3f:bf:98:c1:b7:da:62:da:54:32:da:de:19:ef:6c:1a:
14:8e:32:f0:01:a9:48:91:aa:ff:83:d2:71:7e:8e:5b:a2:b5:
90:dc:b7:d2:36:4d:52:97:14:86:1a:07:9c:15:27:20:8f:00:
67:70:9b:df:ed:eb:35:4b:70:15:58:2e:55:39:c0:3a:07:e3:
ee:da:e4:e3:31:d3:06:74:7b:f9:94:6f:32:97:ac:d1:4f:a2:
be:fd:36:b9:64:7f:6b:61:3e:9f:66:9d:15:c1:e8:d8:75:1d:
c8:af:c9:f0:12:b9:fb:96:94:bc:57:c8:dd:8b:f1:c0:23:fd:
a6:e0:30:ee:e3:7e:4c:03:f3:f0:19:71:a9:84:30:fa:75:ce:
61:81:d3:86:74:66:5d:f2:b4:e7:de:db:0d:02:c1:dd:80:e1:
c9:ec:a4:9e:4b:b8:d4:69:a3:cc:e8:f7:d1:7e:9a:12:dd:33:
7b:68:2e:ab:3e:63:4c:dd:34:3e:c3:dc:62:7a:d3:d9:d6:e5:
b5:93:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:35 2025 by rpki-client