Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: Wz1IBbsfOOi9uCoKGokCHatBxI+frcFgrFHk0AnPDEo=
Subject key identifier: B2:C1:D6:A3:F0:65:BC:AD:AD:F7:B9:81:9A:F5:A8:FE:9B:E8:7B:17
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 019748C2ED86A2183A68565D56220B01B6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 02FC
Signing time: Sat 07 Jun 2025 05:00:23 +0000
Manifest this update: Sat 07 Jun 2025 05:00:23 +0000
Manifest next update: Sun 08 Jun 2025 05:00:23 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: DcFcdR4ry+mXWUctMLtMfqBG4NseysbBeVmr+tJtEmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ed:86:a2:18:3a:68:56:5d:56:22:0b:01:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Jun 7 05:00:23 2025 GMT
Not After : Jun 8 05:00:23 2025 GMT
Subject: CN=b2c1d6a3f065bcadadf7b9819af5a8fe9be87b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:9d:bf:e3:cf:21:e5:1d:25:8d:f1:90:bc:
c0:7f:c5:9d:09:58:0e:20:52:93:24:8e:53:91:24:
a2:5f:30:2c:3b:db:c6:2e:52:f1:36:fc:3f:e5:67:
e7:c8:d2:48:c5:a7:21:fa:11:de:8e:c1:00:17:46:
3c:b8:9c:01:8b:e7:1b:b7:d3:bf:a7:87:09:2b:0c:
7f:a0:18:ef:0f:5d:dc:22:08:d2:77:77:60:c4:b3:
26:60:73:55:86:ba:1f:e0:66:05:0a:c2:a3:6a:a3:
47:a6:b6:1e:91:a8:a2:84:83:00:eb:65:19:62:86:
26:43:11:87:57:a4:93:6c:9b:98:ef:bc:8a:ee:4c:
31:84:c1:32:81:88:fd:36:c2:11:57:5d:56:a4:f9:
51:bb:ad:0b:e4:d8:c4:67:9d:01:86:43:3f:9a:de:
11:9f:9a:6f:d9:d4:f4:6c:70:09:a3:fe:2e:7c:a5:
1a:32:72:a9:d7:aa:d9:e3:5b:7c:21:ef:b1:bd:a5:
5a:53:04:b6:cd:7e:0b:81:e1:7f:a5:31:6d:56:d1:
0c:8e:6f:3e:ef:97:f2:fa:22:81:3a:73:28:80:ec:
a5:fa:0c:2a:7e:f5:8d:e4:6d:d7:f1:93:d6:74:b9:
ac:91:51:4b:14:6b:6c:29:97:79:37:af:17:e7:94:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:D6:A3:F0:65:BC:AD:AD:F7:B9:81:9A:F5:A8:FE:9B:E8:7B:17
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:93:75:de:69:90:2a:b5:e9:95:d7:6c:95:20:6c:da:95:13:
50:a7:8a:89:19:a1:44:e1:63:b0:52:25:21:0d:a9:48:a7:39:
e3:03:e3:b1:0f:61:c9:9d:92:d0:da:06:6f:2b:35:74:18:53:
cc:f4:18:10:c3:ef:f0:ef:60:8f:aa:7a:e6:48:27:99:6a:3a:
e0:9f:03:8c:05:34:70:52:99:99:3a:a5:80:5f:e7:74:35:8e:
83:74:ad:5e:aa:fd:44:20:8f:25:69:09:2d:95:b6:d2:de:10:
62:24:9d:cd:2b:42:e1:e5:da:d8:a5:d4:f5:ce:60:ee:a8:22:
e8:41:66:b5:97:cb:c2:d9:3f:2e:a6:53:b7:ca:d8:32:65:2b:
2f:89:68:f9:8b:3c:65:32:c7:65:f1:53:0e:bd:f5:0d:fe:11:
c8:d1:74:5f:2d:37:56:41:92:32:0d:7a:41:f4:d3:32:d0:a2:
9e:a9:5d:92:5d:03:03:ef:bf:e1:8e:2a:20:56:f8:93:b5:f2:
1a:e4:3f:01:db:03:66:ce:06:a2:84:1a:0e:fc:3a:35:f6:0b:
28:ed:05:0a:e4:82:ca:7d:7e:59:3d:83:4a:d3:64:85:0a:95:
af:9e:d3:dc:fc:dd:a0:b5:46:14:a3:a9:55:a3:70:1b:2d:81:
9b:fa:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:47 2025 by rpki-client