Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: V1/r7dhwRinOkgqYXGYF45jOjf8JN1a2yyAp8yB2KW8=
Subject key identifier: F0:0C:5B:D7:F4:33:00:48:85:93:38:94:A2:E3:95:D6:9D:C9:C9:12
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019754C784EB5F86FE5E436D9548588186AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0A11
Signing time: Mon 09 Jun 2025 13:00:51 +0000
Manifest this update: Mon 09 Jun 2025 13:00:51 +0000
Manifest next update: Tue 10 Jun 2025 13:00:51 +0000
Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: b5cB2QYWu+Wc89IwXnFoPyvHBPKvKorqByGgP3v5Z2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:84:eb:5f:86:fe:5e:43:6d:95:48:58:81:86:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jun 9 13:00:51 2025 GMT
Not After : Jun 10 13:00:51 2025 GMT
Subject: CN=f00c5bd7f433004885933894a2e395d69dc9c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:c0:be:9b:91:93:dc:b5:22:dd:a6:33:ca:
31:e5:df:95:c2:f3:7f:f8:61:32:9a:2b:66:57:a5:
42:35:84:a9:de:51:10:e6:40:3b:dc:14:d6:21:7c:
1c:25:8c:87:bc:ed:91:ba:fa:1d:ef:9f:59:87:f8:
0c:23:b0:0c:7c:d5:8b:ac:65:9c:24:98:63:1a:0e:
cd:dd:53:58:de:b8:fa:f8:1d:d6:b2:1f:6b:b6:00:
66:3c:bb:89:05:f5:60:a6:ba:16:df:3e:1a:22:45:
d1:38:39:7b:14:b5:db:8a:e5:3c:da:97:1d:5e:c7:
61:80:f6:10:7f:bf:62:26:1e:47:e3:9b:3d:17:ea:
11:f7:06:d1:ef:93:e2:ad:7d:af:a4:27:f1:3f:9c:
bc:41:e3:cc:5e:b3:17:37:40:29:b6:c5:89:ea:b3:
a7:4a:1f:df:99:3b:83:2d:13:18:b7:01:72:16:9b:
83:6f:73:0e:a8:25:e5:5f:2d:20:ef:43:52:9e:38:
02:af:07:2a:8a:f1:aa:07:49:0c:68:a7:12:f4:d7:
8b:4e:18:1b:29:d8:51:ab:7c:ea:62:e4:75:07:b3:
8f:b1:86:31:31:74:58:b3:61:8b:be:e6:67:6d:92:
f8:32:87:5c:f1:ee:31:17:eb:37:84:3f:ee:d6:7d:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:5B:D7:F4:33:00:48:85:93:38:94:A2:E3:95:D6:9D:C9:C9:12
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:5b:a3:af:76:c8:74:34:fa:f9:4f:5d:32:d5:61:62:04:
6d:52:ed:eb:03:bf:1a:24:a8:6e:2b:f4:96:2a:54:81:0e:c9:
7b:9c:68:8c:ca:3a:f0:e9:d5:bf:ee:32:69:2a:7f:b6:1e:6b:
92:99:eb:85:23:49:1a:96:9f:41:63:fe:25:bd:1a:00:46:fa:
17:a0:fc:c8:3a:08:d9:a5:58:f6:0e:43:33:18:ed:07:f0:b7:
bc:27:a3:01:01:02:fc:2e:00:fa:4d:5b:79:47:f0:e9:30:bc:
30:35:9d:7e:93:3d:c2:19:a3:5c:f0:16:ae:4d:10:6b:cd:77:
fd:b6:e4:da:52:03:95:ee:b8:b3:a0:38:81:03:6c:d4:df:43:
4c:dc:4a:b1:77:76:79:2a:ce:86:0d:a5:06:a3:9c:1a:94:43:
56:7c:e6:80:1c:eb:c7:64:7d:f4:6f:86:b6:18:d7:ed:03:66:
c3:a6:89:4e:b2:59:9a:15:6e:4b:d2:b0:b4:1f:99:24:32:f6:
03:7c:c2:c8:60:fa:c5:d0:ed:c0:a4:c4:91:ee:d2:6b:44:6d:
b0:e7:05:cf:69:b3:b4:1f:79:07:2a:40:53:8f:10:12:56:5c:
81:a2:4b:d6:f8:5a:be:9c:19:b8:8b:50:35:5d:3b:80:0f:61:
ac:08:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:54:55 2025 by rpki-client