Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: bE+lu3LyAGCXgp4zwxBgGCkfrAgACGfWGgGrWZJoZvA=
Subject key identifier: CF:10:E2:65:D6:93:72:60:30:19:CA:6F:2C:A0:FD:1F:B0:AC:3E:58
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 0197B96AA99F82CD2B27D0C07F82EE2FFC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 02:01:04 +0000
Manifest this update: Sun 29 Jun 2025 02:01:04 +0000
Manifest next update: Mon 30 Jun 2025 02:01:04 +0000
Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: PpIoiVhY4zihzp2djlIUUxL6QC3qsIjDv6Emh0iWtFo=)
3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:a9:9f:82:cd:2b:27:d0:c0:7f:82:ee:2f:fc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Jun 29 02:01:04 2025 GMT
Not After : Jun 30 02:01:04 2025 GMT
Subject: CN=cf10e265d69372603019ca6f2ca0fd1fb0ac3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cd:20:32:f1:52:0d:9d:c3:1e:ad:35:b5:67:
2b:49:72:31:8b:db:41:f9:46:1b:2d:47:47:eb:f7:
ba:b4:03:cc:10:dc:ea:73:8f:4f:6b:f8:ed:c1:cd:
a4:f1:6f:fa:3a:e7:98:f8:c9:a1:94:84:64:e8:5f:
f9:2c:4a:11:8d:b2:84:5f:d2:58:9f:b6:16:80:d3:
ff:01:66:f4:58:dc:a4:ee:61:ea:4c:df:55:91:3c:
25:46:ff:a8:27:6b:f3:4c:81:85:a7:f3:b2:fb:2a:
2d:3f:df:24:c2:41:45:e2:a9:49:46:38:1f:db:7a:
33:60:2c:02:f9:78:a0:b7:22:f2:f1:60:e4:1f:f2:
43:8d:27:89:e4:fb:12:e1:22:63:08:18:03:09:42:
f0:20:06:92:28:91:9e:6d:03:39:5b:a6:76:fb:43:
eb:d4:b1:9b:2c:f6:83:26:98:c3:88:23:b1:bd:b0:
39:eb:95:91:76:34:68:a5:c2:db:fc:07:3c:8c:17:
36:56:59:c1:4c:79:5c:28:06:d2:f5:3d:88:cd:dc:
5c:99:64:df:60:8c:40:b6:d7:d3:35:9b:89:5a:c3:
5c:b1:16:88:c6:d4:87:32:43:98:bd:78:fd:50:3f:
7a:93:5a:61:0c:8f:01:a8:60:d5:a0:d2:02:e1:f5:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:E2:65:D6:93:72:60:30:19:CA:6F:2C:A0:FD:1F:B0:AC:3E:58
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:91:aa:9b:0b:3d:ea:9f:82:39:6a:97:69:fd:4b:d1:57:a5:
d9:db:2c:08:b7:de:af:5d:07:a9:d1:5a:08:30:9f:fe:b7:5d:
d9:a2:2d:b2:88:1f:53:32:9e:6f:ca:9f:a5:fc:17:dd:11:a1:
c6:56:03:2f:24:7e:b5:f6:fd:61:9f:cc:f1:74:d9:be:a8:ca:
30:04:7c:ee:4e:81:d8:66:20:30:ce:71:f2:50:7e:d9:21:de:
5b:0c:bb:d5:01:d7:a1:63:43:bd:bd:fd:dc:78:67:26:ca:56:
25:e2:a6:11:ef:56:bc:9a:c2:fa:0e:e0:06:bc:89:5e:f4:62:
65:51:7a:19:e3:c4:93:79:d6:89:fb:81:78:4e:ef:e4:a8:f4:
51:fc:ba:cc:50:ff:41:3d:29:66:1d:4a:49:fe:57:5c:31:d6:
6f:39:16:3c:0f:eb:28:b9:2d:52:8d:2c:7c:e8:2f:8b:ee:c5:
2b:79:32:37:87:c6:ae:97:d0:56:50:cd:fa:de:ad:c7:81:33:
4a:bc:bc:12:9b:f4:64:cb:b8:2b:39:63:a2:07:fa:ee:9d:0c:
b3:f6:5a:42:25:3c:e5:90:a9:69:0e:7e:3b:ae:7f:be:ea:95:
7f:be:c7:b2:4a:0b:15:d4:65:3b:82:72:00:62:e4:99:87:05:
74:ac:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:41 2025 by rpki-client