Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: kua/9RZISf2UvTW+QHW48SiDkrUohfQVWNfwlZNVASA=
Subject key identifier: E9:FF:1B:16:AE:AB:39:24:BA:6B:81:03:12:8A:BA:68:58:41:C5:1C
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 01975FEFD5DED8240A47DBD169303543E67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0C1B
Signing time: Wed 11 Jun 2025 17:00:42 +0000
Manifest this update: Wed 11 Jun 2025 17:00:42 +0000
Manifest next update: Thu 12 Jun 2025 17:00:42 +0000
Files and hashes: 1: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: nL5gXgyDIgcT6+BNnVdxZy1VYuAyouHI96BLqGgf1Xs=)
2: Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa (hash: iHt82QR12LPpEvZ7uiS/6X3yVLGKHgczSuxvhMOvlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:d5:de:d8:24:0a:47:db:d1:69:30:35:43:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Jun 11 17:00:42 2025 GMT
Not After : Jun 12 17:00:42 2025 GMT
Subject: CN=e9ff1b16aeab3924ba6b8103128aba685841c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:e5:12:98:46:c7:ab:10:36:44:48:2d:2d:
34:77:45:9a:eb:ed:91:29:86:6a:dd:33:c5:24:4d:
a3:a9:ea:d4:90:0e:46:fe:a6:e7:4d:79:d7:52:98:
32:78:71:e3:91:59:b5:0f:8c:90:24:2a:48:aa:99:
85:de:73:b3:55:a8:39:c9:10:e4:83:07:5a:26:b8:
a7:b9:9c:80:f5:ab:4f:bb:91:7a:c7:c9:65:5a:66:
d1:ca:25:0c:22:fd:59:d8:ad:e1:3c:c0:08:6b:74:
75:a5:37:9d:a9:2b:44:af:f8:a2:ea:13:2d:eb:ac:
f5:51:4b:87:c6:96:5f:42:26:a5:5c:0b:cf:57:be:
c2:2f:63:8e:d7:49:cf:30:16:ea:8d:ef:4a:d2:02:
95:31:31:9e:60:df:49:ff:e6:ba:a9:80:01:5a:2e:
f5:d7:3e:0a:bc:dd:e2:52:ba:db:5c:82:e5:4c:e4:
ee:61:44:32:22:f5:2c:65:cd:e9:ee:a5:be:a2:4f:
0c:b5:88:65:9c:61:33:83:89:44:ec:2a:9e:d9:2f:
cc:fb:57:21:9d:0a:51:59:f6:93:10:36:1f:b6:2e:
44:b2:c2:16:31:64:1e:e0:43:6f:43:f2:d1:d2:13:
25:a7:38:16:be:0b:26:28:44:e0:61:32:55:3f:1f:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FF:1B:16:AE:AB:39:24:BA:6B:81:03:12:8A:BA:68:58:41:C5:1C
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5c:6e:50:ee:3b:e6:d3:7b:2a:a2:d1:a7:53:52:37:9f:8f:
0f:68:a9:c4:3d:99:5f:d8:8e:9c:38:1d:4c:c4:f1:e6:a1:90:
63:15:7e:a0:cd:07:33:46:cc:c5:5b:db:b7:eb:3c:b3:df:06:
14:62:17:53:51:63:d9:cb:31:f6:52:b5:6c:09:5b:94:4a:84:
e5:8c:e9:23:a9:ec:90:28:05:76:5d:bf:54:19:72:b5:f6:93:
ff:af:33:bf:83:d1:b7:7c:52:b0:db:4e:ee:96:94:75:be:e8:
2c:0d:e5:e8:06:2e:f4:72:09:19:1e:d9:e4:99:13:d4:7a:9a:
a3:3b:17:73:61:2d:f4:c0:22:0e:58:99:46:c4:27:20:1d:73:
69:41:ae:ba:c5:b2:4b:6e:15:da:a3:63:bb:6c:e1:99:0a:5c:
fd:79:9d:f2:9d:55:ec:a8:74:30:56:7f:dd:05:85:75:17:fc:
6e:44:2a:0b:3b:e6:66:11:99:a8:43:e7:2b:7e:7c:b9:75:51:
d3:02:99:6b:2e:26:b4:9a:be:3d:ca:ae:51:ad:fc:19:34:f4:
bc:fa:9d:9b:2c:cb:c3:2d:c0:c3:e8:86:8d:79:07:d4:fd:aa:
0e:b0:76:0d:2c:bb:8c:2c:ae:ba:6a:b3:c0:17:67:16:61:2f:
a6:d8:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:42:55 2025 by rpki-client