Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: 47uPAkWNjmkPKWDMU6SlFUL1ORnLbnhfehEgmUFgBUI=
Subject key identifier: 06:AD:7D:45:71:75:90:21:FE:BA:0C:33:7A:C4:C3:70:31:D3:95:1F
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019754905CA39DC068C114A338DCCCC9F300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 12:00:36 +0000
Manifest this update: Mon 09 Jun 2025 12:00:36 +0000
Manifest next update: Tue 10 Jun 2025 12:00:36 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: hrfXBY7fLI1FP9zI/kCeHGQyVIYn5QhkBy1UKwel9GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:5c:a3:9d:c0:68:c1:14:a3:38:dc:cc:c9:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Jun 9 12:00:36 2025 GMT
Not After : Jun 10 12:00:36 2025 GMT
Subject: CN=06ad7d4571759021feba0c337ac4c37031d3951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:0a:85:7a:96:f3:7a:b0:9b:09:3e:d4:6d:
f4:91:88:6b:87:de:63:01:eb:37:1f:66:aa:f4:bc:
dd:eb:ef:7b:bb:b6:d8:3c:70:05:67:b3:40:4c:06:
1d:e1:be:9b:6a:48:95:5c:05:b1:f5:41:62:dc:35:
56:4d:9b:1b:67:0f:d2:f8:9e:2f:66:db:a9:c1:de:
25:13:59:05:f5:a9:18:6c:c5:19:c0:fb:08:e5:34:
bf:52:c2:b7:e3:26:34:c0:7b:71:c8:70:2f:97:c6:
f9:69:58:61:bd:33:21:58:c6:1b:55:34:22:6e:55:
26:1b:3e:c1:0e:ee:2c:af:d7:c4:5f:95:2a:ce:ae:
1b:6a:14:5b:39:64:9a:27:cf:eb:b7:b7:f3:31:49:
50:1b:4f:7f:61:5b:d6:0e:56:f3:cc:1c:b7:f4:34:
c5:24:f0:e5:f2:b8:4a:66:55:93:25:e9:34:7c:6f:
1b:c2:a2:b0:97:e4:7b:cb:94:c4:4a:91:a9:2a:09:
a9:a8:0e:22:b0:09:57:47:fb:c6:5d:ca:e7:88:1b:
bc:c8:54:49:72:9e:f8:8f:74:e2:49:be:c8:21:db:
a5:b9:6c:8e:95:1b:91:bb:60:3b:6a:d8:77:7e:4a:
63:ed:cb:a5:f2:13:8d:17:1f:fb:b2:19:0e:5f:10:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:7D:45:71:75:90:21:FE:BA:0C:33:7A:C4:C3:70:31:D3:95:1F
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:f6:76:2d:66:68:f2:6b:d7:ea:21:00:47:af:81:d3:a2:
20:cb:0e:c1:42:63:80:f7:39:82:2f:47:96:c7:95:55:aa:65:
9d:16:3f:00:ec:cc:31:73:a6:c5:33:57:d2:10:2c:96:d2:5d:
3f:92:1d:ff:e3:97:5e:02:7c:eb:38:d7:14:c1:c3:b4:68:8b:
26:be:71:5d:d7:f6:3a:80:e2:7a:f9:66:d2:84:00:f3:03:73:
99:0a:2e:ad:6a:ea:0f:cd:cd:e8:31:d7:3b:b7:a0:30:76:86:
4f:d7:41:2f:0a:cf:29:61:bd:ad:1f:bd:23:53:7d:6d:be:c7:
84:2a:53:e7:f1:9f:45:ef:90:13:e5:5c:b8:32:df:14:32:c1:
1c:19:a2:4f:e9:7b:26:28:06:64:6c:9f:0a:66:6c:7d:bd:7d:
7b:b7:4d:12:9f:4b:00:59:e1:28:c5:93:82:4e:24:24:3f:24:
77:45:03:cf:dd:9b:0c:42:31:7a:96:1d:07:a3:b8:1e:fa:51:
ca:df:cf:49:25:71:ea:3b:a3:02:cc:a7:d7:55:7f:18:00:51:
89:16:5c:6f:d2:08:5c:a1:53:59:df:de:62:47:0e:c6:20:bc:
c6:28:48:66:a4:b2:71:20:28:6b:87:a7:21:f9:33:3a:57:7e:
b4:4b:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:17:59 2025 by rpki-client