Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: DvWeN1XZJX9+Inh/JpXU/uZVD+i3prheYzMc39E61XU=
Subject key identifier: 98:7C:6A:B3:C5:7B:AC:DF:DC:D8:51:59:1B:78:76:7D:DB:0C:57:2D
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0197B745BACC8AEB3A7332BB17E31C5298A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 1511
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: M9D+SkJ+yP2l+C4TcdfTYRI2jWMoYaIw8wWvV/CMjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ba:cc:8a:eb:3a:73:32:bb:17:e3:1c:52:98:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=987c6ab3c57bacdfdcd851591b78767ddb0c572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d0:b2:05:fe:13:b0:6a:15:13:2e:01:88:
02:04:9e:cf:ce:fb:db:71:0b:e9:45:88:32:14:3c:
2c:7d:a3:61:3d:b5:ba:fb:4c:f8:36:03:d9:a0:ba:
13:69:9c:20:36:be:83:1a:9b:50:1a:11:a1:67:b1:
1e:a7:51:7f:40:5a:93:af:8f:01:83:b7:b4:6b:ce:
a3:5e:7b:c5:29:32:bd:f6:64:da:2b:eb:91:ec:12:
7c:81:cd:6b:2c:ae:6f:26:d8:ed:58:6a:8e:67:54:
2a:d3:d5:cc:c3:91:f9:ed:a8:e5:3e:45:42:b1:ed:
e5:11:1e:d6:0e:73:f2:ec:09:af:47:3b:00:69:f9:
7d:47:74:55:01:f4:01:66:4d:91:d0:ae:8e:44:b7:
6c:aa:a3:be:14:73:53:2c:30:6a:bc:73:75:a1:95:
cb:a6:60:6d:17:55:03:7e:74:81:f7:99:95:af:5b:
62:5d:37:a4:85:5c:ba:96:61:71:d1:51:28:94:d8:
d4:e4:ba:0f:45:70:ed:9e:c0:c7:ee:96:11:72:de:
85:c2:93:9a:2e:f2:12:64:67:cb:c8:71:bf:de:9c:
0e:3e:5f:92:2f:c1:54:77:2d:84:ad:10:ff:12:2e:
eb:23:49:a9:a7:09:65:a9:ce:6e:1a:e8:6d:f0:ef:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:6A:B3:C5:7B:AC:DF:DC:D8:51:59:1B:78:76:7D:DB:0C:57:2D
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:9e:54:3a:5c:c4:a9:af:bb:ba:8e:1c:9d:e4:e7:05:48:
5a:eb:31:c3:ce:4d:bd:56:71:27:8d:1e:40:da:9a:ad:ac:e2:
bd:38:fe:d7:c2:c3:ac:5a:22:45:5c:9e:f0:31:bf:77:5e:5b:
fe:3a:0b:54:97:65:06:bd:34:a1:96:c4:53:5c:40:62:55:01:
48:3b:e8:27:e0:b3:64:88:4b:21:91:0b:73:8b:dd:c5:fa:3d:
9f:4a:30:3f:2a:c1:88:7a:5e:11:a2:c5:78:15:16:cd:0d:03:
41:a5:bb:b1:ed:6b:9b:2a:b5:cc:63:54:bc:9b:5e:36:86:1d:
ec:f8:6f:4b:99:81:ad:2c:f6:3f:0d:85:8c:d5:d4:49:12:aa:
e7:ac:2b:1e:0f:87:ac:cd:e2:dd:ae:28:0f:58:78:b9:65:19:
03:fb:9d:01:2e:7e:be:09:2b:30:a1:51:bc:f2:81:70:06:5d:
4e:7c:7b:fa:37:cb:e2:0e:d4:ef:87:11:6d:dc:48:e1:43:57:
cf:f3:55:b5:36:d3:42:4c:05:0c:2c:dd:e9:d6:68:6b:38:52:
3d:ac:4d:8e:9e:cc:8c:d9:cb:1f:ca:fe:df:6b:49:82:c6:86:
1d:dd:2e:54:25:79:97:a0:c5:b4:00:af:70:ca:8b:29:2f:6c:
0a:ac:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:53 2025 by rpki-client