Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: cj0WKsub6S5967NYseWH+C3EHYarSW73aRn0Gc7hhnU=
Subject key identifier: A0:69:B4:3E:E5:34:79:45:5B:F4:8B:9F:25:D9:E2:1E:2C:28:8A:61
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 0197B8901EDFE0441B503D5ACF9F36602365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: xx61EPFW2VtP2AmWyTK0CM+FSoZ+M7blFXfetCNq53E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:1e:df:e0:44:1b:50:3d:5a:cf:9f:36:60:23:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=a069b43ee53479455bf48b9f25d9e21e2c288a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:4c:6f:b5:1c:35:74:b9:04:1c:93:82:f1:
69:01:10:31:d7:e4:bf:c9:25:5b:82:c1:f5:85:10:
71:9d:d3:f5:4d:ca:f9:8d:0b:a5:25:dd:ad:1f:33:
d2:4c:3f:b1:f6:c8:d0:ac:38:7a:d8:92:49:d7:25:
f9:8b:f8:b3:c5:e5:e4:26:1b:5a:4f:ea:74:f6:f2:
9e:b2:3b:7e:06:a4:2a:1f:2e:2a:fb:a4:83:6e:d8:
0d:ce:67:4a:51:6d:47:76:7e:86:3b:ad:53:2d:d5:
cb:fe:71:78:4f:0c:00:ef:01:2f:ef:2c:ea:ae:a7:
a2:8d:ce:8b:84:f6:28:80:d4:ef:2b:22:2f:ff:28:
03:58:da:42:a9:76:26:2b:f5:c4:de:fd:ce:bb:6a:
73:d5:ad:07:02:3d:61:98:36:fa:02:97:c0:31:bb:
f6:b5:03:80:27:51:92:89:c4:3a:9d:07:92:0e:f0:
8d:fb:12:86:42:22:64:6b:fc:51:ba:bc:30:96:3c:
a0:88:de:19:7a:42:ff:68:6d:1b:ee:9f:35:02:cb:
0b:12:06:8a:2b:11:a6:33:cd:83:da:b9:c3:46:f9:
53:7e:ff:e5:f9:3a:25:03:4a:e1:f0:da:53:3f:e4:
18:cc:95:45:a9:c4:96:f8:a5:6f:fa:23:6d:f1:5f:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:B4:3E:E5:34:79:45:5B:F4:8B:9F:25:D9:E2:1E:2C:28:8A:61
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:61:56:e3:8e:40:69:d0:a9:32:f7:af:1c:3b:95:d5:28:
d1:e5:7a:fd:51:99:ef:ea:94:dd:aa:e5:89:2f:8d:11:20:63:
09:c7:88:30:57:61:0c:fa:b9:eb:c5:53:0d:6d:2e:bb:17:e9:
39:12:d1:94:04:c8:c1:86:92:fe:cf:86:8b:e2:d8:43:af:2f:
3f:d8:8e:7b:24:24:2d:87:bd:ab:11:06:20:41:38:0a:54:bd:
20:4d:03:18:31:53:e2:84:ba:1f:cd:85:05:7e:50:0b:75:5f:
ac:cc:4f:f9:de:06:0d:a7:27:f8:c8:d8:0e:ca:51:15:bc:56:
d9:55:01:71:1f:26:0e:80:e4:12:fe:0c:65:c8:84:08:e0:79:
34:91:ea:c5:41:9b:82:a3:24:71:a2:97:19:e4:22:02:fa:b3:
cd:49:9f:bc:e3:0c:7d:51:66:ab:d3:4b:39:b8:4e:4d:d8:ca:
d0:4e:0d:2e:23:a6:2d:2b:a0:0f:96:e8:82:ca:8d:6b:3d:03:
6d:9e:7d:cf:3a:c5:45:95:54:c5:c2:23:8d:7e:22:a4:c9:01:
ce:88:25:51:b2:3d:69:cd:f2:9f:b4:b1:e5:8a:95:79:82:4b:
7e:6e:68:bd:a0:cb:92:bb:ea:ad:ca:d7:12:e5:c7:69:20:2c:
18:07:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:48 2025 by rpki-client