Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: MxkzSjuY/L8fSgjP9Q07MsqFeubv9EtMb2S0qn5tYow=
Subject key identifier: 7D:1A:17:94:47:36:47:CB:16:7E:33:02:EC:7B:DE:E1:75:4E:69:70
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 01974CA0158622A2073A4EBDC196BEE9682F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 23:00:49 +0000
Manifest this update: Sat 07 Jun 2025 23:00:49 +0000
Manifest next update: Sun 08 Jun 2025 23:00:49 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: I/aj5mLGo97mu+w2Jkfawz/KoPpLSrl6iqRBXagFusw=)
2: vfgX0QM1-x_CfmwOuFEwuDR0qtE.roa (hash: VmApxfvV1fKRc5LBTSdDtZW6mm+Y06ANpvyiPSheTug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:15:86:22:a2:07:3a:4e:bd:c1:96:be:e9:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Jun 7 23:00:49 2025 GMT
Not After : Jun 8 23:00:49 2025 GMT
Subject: CN=7d1a1794473647cb167e3302ec7bdee1754e6970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:d2:85:a0:6c:af:c5:30:0c:70:31:05:20:
16:7b:28:db:95:d5:e8:17:14:63:d9:6d:12:7e:48:
d3:a6:85:cd:a8:9f:0e:0b:e0:7c:d2:68:cc:8e:7d:
48:8d:6d:3a:ed:05:a3:44:dd:d7:07:61:0e:e8:10:
dc:f8:aa:8c:e6:1d:78:71:5b:d9:73:e0:7a:ee:82:
b2:0d:0c:13:60:4b:95:8a:98:a7:5e:d6:7d:73:c3:
81:d6:79:37:6c:73:c3:3d:ca:36:48:c1:c2:dc:90:
02:ec:18:17:dc:3b:ee:d2:58:88:fe:47:17:c7:53:
22:5f:0c:9e:53:38:bd:4e:e3:cd:e4:74:40:6e:d3:
fc:17:cb:a9:0a:68:08:12:b0:ea:e1:11:bb:d7:47:
6c:b7:d2:d3:d3:f1:12:b5:f6:97:f2:c3:b3:b8:57:
ed:64:9c:54:8a:3c:57:df:6b:30:84:c9:34:bf:8a:
64:65:28:7a:98:4c:98:06:98:5a:3f:48:58:ec:a7:
6c:d2:d5:e8:16:f7:7c:22:7a:fa:b8:c4:ad:2a:04:
2d:7e:b7:e9:83:c3:0c:b4:09:c0:6e:e3:f1:67:9b:
3a:2b:99:f5:54:97:42:37:39:78:0a:95:5f:0e:c1:
e0:c4:61:62:80:d0:a4:41:96:b8:fc:4b:9a:91:a2:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:17:94:47:36:47:CB:16:7E:33:02:EC:7B:DE:E1:75:4E:69:70
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b0:a9:65:54:f4:76:71:cc:15:38:bf:cd:90:b3:d0:f0:cf:
14:a5:2c:2c:3f:87:f7:78:24:63:78:95:41:fa:0b:6b:e7:6a:
91:02:29:c6:0d:ab:4d:43:01:d2:ac:94:d6:52:4c:2b:6b:05:
fd:d5:a4:6a:b3:c8:a9:e4:ab:43:c3:aa:23:ba:04:40:64:9a:
7b:6c:e2:cb:e9:1a:e7:d3:8c:93:a1:4b:21:f6:2a:5c:d5:af:
ec:0d:f7:a4:15:78:6c:50:31:12:89:7a:55:99:70:cd:c2:bf:
7a:bf:08:88:9d:cc:5b:25:bf:d5:56:35:7a:17:4f:8d:b8:ca:
cb:a8:9c:76:bd:61:0e:ae:88:33:54:b5:f6:b3:9b:7d:8e:e4:
a9:6a:f9:b8:12:27:90:cf:ec:a0:6a:18:d2:5f:78:5d:fa:1c:
95:00:3c:4f:4f:e1:63:bd:21:0d:f6:06:de:9c:bb:b5:e5:80:
92:04:ea:e1:ac:cb:3b:9b:c6:ce:c0:34:9b:a3:1e:df:21:6b:
32:a6:60:51:f5:33:82:5c:0e:a9:d3:03:0e:10:ce:d3:ad:ce:
29:0e:8e:aa:2b:32:b3:6f:dc:af:24:33:4c:09:ae:dc:48:d6:
26:2e:68:b0:e2:ae:d7:69:74:f3:2f:c1:75:d1:80:b2:d9:70:
b8:cd:52:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoBWGIqIHOk69wZa+6WgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl
NzNiZTMwHhcNMjUwNjA3MjMwMDQ5WhcNMjUwNjA4MjMwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZDFhMTc5NDQ3MzY0N2NiMTY3ZTMzMDJlYzdiZGVlMTc1NGU2OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcDShaBsr8UwDHAxBSAWeyjbldXo
FxRj2W0SfkjTpoXNqJ8OC+B80mjMjn1IjW067QWjRN3XB2EO6BDc+KqM5h14cVvZ
c+B67oKyDQwTYEuVipinXtZ9c8OB1nk3bHPDPco2SMHC3JAC7BgX3Dvu0liI/kcX
x1MiXwyeUzi9TuPN5HRAbtP8F8upCmgIErDq4RG710dst9LT0/EStfaX8sOzuFft
ZJxUijxX32swhMk0v4pkZSh6mEyYBphaP0hY7Kds0tXoFvd8Inr6uMStKgQtfrfp
g8MMtAnAbuPxZ5s6K5n1VJdCNzl4CpVfDsHgxGFigNCkQZa4/EuakaL86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0aF5RHNkfLFn4zAux73uF1TmlwMB8GA1UdIwQY
MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt
OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl
LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbCpZVT0
dnHMFTi/zZCz0PDPFKUsLD+H93gkY3iVQfoLa+dqkQIpxg2rTUMB0qyU1lJMK2sF
/dWkarPIqeSrQ8OqI7oEQGSae2ziy+ka59OMk6FLIfYqXNWv7A33pBV4bFAxEol6
VZlwzcK/er8IiJ3MWyW/1VY1ehdPjbjKy6icdr1hDq6IM1S19rObfY7kqWr5uBIn
kM/soGoY0l94XfoclQA8T0/hY70hDfYG3py7teWAkgTq4azLO5vGzsA0m6Me3yFr
MqZgUfUzglwOqdMDDhDO063OKQ6Oqisys2/cryQzTAmu3EjWJi5osOKu12l08y/B
ddGAstlwuM1SNw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:02 2025 by rpki-client