Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: PpIc3oRWHj8FD2xIctbAUSlj1A8mnCn+thiFXdsrmR0=
Subject key identifier: E0:AA:34:7F:E7:61:09:9B:B6:4A:FC:51:4F:F0:E9:9C:B7:08:1B:66
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0197CB39F50DDF045CF7029A810F8A086F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 0FBA
Signing time: Wed 02 Jul 2025 13:01:02 +0000
Manifest this update: Wed 02 Jul 2025 13:01:02 +0000
Manifest next update: Thu 03 Jul 2025 13:01:02 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: mfMUkPlKoMGLs6uy//UVAnORsMfFKwE5imsIKKnpPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:f5:0d:df:04:5c:f7:02:9a:81:0f:8a:08:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jul 2 13:01:02 2025 GMT
Not After : Jul 3 13:01:02 2025 GMT
Subject: CN=e0aa347fe761099bb64afc514ff0e99cb7081b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:db:da:ea:5d:b9:aa:71:75:6c:d0:8b:c0:
01:8b:6d:f7:2f:60:81:59:77:73:e3:78:36:18:88:
62:56:1e:77:c7:ff:f3:68:fc:72:39:bd:bc:86:bb:
18:ae:5d:11:6e:be:77:79:17:ef:9f:bc:a2:32:e0:
e6:01:6c:c2:08:26:dd:3c:61:c7:af:a8:fe:f5:58:
a3:9d:eb:a6:5a:2a:74:d1:d5:fc:ef:3a:b5:10:0e:
85:68:f0:4b:bd:25:21:94:60:5d:cb:f3:47:cd:3a:
42:b8:0d:cb:c1:30:4c:60:f5:10:76:46:14:27:f0:
5e:15:6b:63:1e:df:94:93:4b:ab:d1:49:5c:6f:f1:
26:0f:e8:35:5e:ce:1d:cb:9f:43:cc:8f:99:f9:0c:
2f:a1:69:60:f9:70:8c:f4:9f:96:a6:15:61:07:d6:
d6:47:cb:23:ed:b7:74:46:6b:02:10:56:54:97:b1:
05:96:1e:77:48:3b:33:f6:a1:39:af:72:d6:78:92:
e6:8d:ed:35:ca:4f:cb:c2:f3:0b:2a:2a:6c:77:58:
10:90:df:8f:38:85:96:a7:7f:e8:25:e9:0b:19:a4:
db:d8:d4:43:a6:ed:3f:12:3e:d6:71:89:10:e3:68:
ac:be:d4:66:00:93:27:7b:0c:b4:8d:7a:45:5d:02:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:34:7F:E7:61:09:9B:B6:4A:FC:51:4F:F0:E9:9C:B7:08:1B:66
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:2f:b6:48:8c:37:bc:0b:97:32:14:50:c7:d7:bf:bc:ac:
fe:24:81:eb:09:91:51:8e:17:13:ce:8f:fc:fb:4d:7f:42:2c:
6f:04:28:3c:ad:53:eb:4b:b8:ca:c2:28:a1:a4:78:12:ce:e3:
5a:ca:0c:25:ea:bb:ba:a6:f7:8d:54:b2:ed:a1:6b:fb:ed:92:
52:b3:91:ce:43:73:ad:04:ea:86:c1:b3:7c:e6:c9:54:1c:5b:
1b:1d:0d:2e:42:cb:c1:0f:65:fd:6c:df:0c:41:17:ef:56:44:
97:b6:bb:94:52:54:61:34:08:28:b2:a5:f3:67:5e:e0:f3:c4:
92:c8:bc:bb:3f:ac:5c:f8:83:88:5f:0d:81:c3:37:90:a6:4c:
ae:c0:95:29:41:29:57:ce:a0:2a:92:37:cb:ff:cb:84:d3:9b:
0d:a6:70:10:2f:89:a0:84:03:6a:4d:82:70:ea:01:aa:1b:66:
57:dd:ee:55:bb:60:ec:84:8b:67:92:28:91:39:9d:be:92:55:
b1:80:d6:25:dd:9d:68:59:d3:92:a5:29:76:42:cc:21:26:fe:
63:12:41:ca:3d:e2:32:d9:b8:fd:74:45:7b:d1:77:b4:c0:14:
79:ef:68:f2:51:4f:8b:0a:cf:8f:8c:09:02:38:ec:a3:e8:56:
9c:b5:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:38 2025 by rpki-client