Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: sL/0QkXUksA5yGaOwLLunHJVm/x0WQG/WVS7U1f5p+4=
Subject key identifier: 64:E6:E6:F1:0C:2F:21:3D:36:5C:DC:0A:0C:32:CE:08:86:53:51:38
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 0197C42548820499063BAB46CF09E2BDDC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 08C7
Signing time: Tue 01 Jul 2025 04:01:06 +0000
Manifest this update: Tue 01 Jul 2025 04:01:06 +0000
Manifest next update: Wed 02 Jul 2025 04:01:06 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: 8+9CkCXo2yPn4yI/I3LQl5Jl9FTvGXwgGDRuWPOJbCA=)
2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:48:82:04:99:06:3b:ab:46:cf:09:e2:bd:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Jul 1 04:01:06 2025 GMT
Not After : Jul 2 04:01:06 2025 GMT
Subject: CN=64e6e6f10c2f213d365cdc0a0c32ce0886535138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ba:21:42:43:13:60:b6:e9:fa:d8:b4:a2:
a0:46:b5:7e:ec:56:57:45:b5:e0:78:74:70:58:44:
aa:1b:ed:32:f0:45:c2:0e:ac:47:c3:61:c0:35:5e:
6f:ba:18:ba:17:23:fb:d0:0d:fe:76:55:f1:27:2d:
18:19:6f:d0:08:c3:0a:92:84:16:8a:1e:89:eb:08:
17:aa:63:8b:72:4b:dd:68:25:dd:d3:62:5e:f7:5b:
6d:91:7b:c4:02:49:9f:b1:51:0a:86:d5:ab:7f:10:
a5:a4:98:bc:65:de:52:62:d4:ce:04:2d:c2:58:e6:
fc:c8:98:34:2a:fa:44:d6:eb:a2:20:d9:22:db:a6:
66:08:7f:c2:9c:52:dc:11:0f:01:ca:82:25:05:e3:
35:d6:ba:38:5a:60:58:03:cd:1a:c4:8c:e3:3c:5b:
cc:d1:fc:cb:e5:5a:b2:e9:ad:1d:ed:1c:7e:22:5b:
e3:68:06:05:31:22:c5:97:a2:cf:96:e2:f1:a7:04:
29:19:23:b9:4d:0c:92:89:7f:46:f6:d6:67:a2:f7:
ea:b1:34:87:50:09:d2:d7:88:4e:ca:1c:f7:52:fa:
35:82:16:8f:23:75:5e:81:28:15:d0:9e:21:59:ae:
0d:d4:0f:60:16:48:2f:29:9b:ff:15:85:6b:8a:3b:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:E6:F1:0C:2F:21:3D:36:5C:DC:0A:0C:32:CE:08:86:53:51:38
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:a5:fb:78:9a:77:19:62:58:89:96:67:8c:42:ef:ce:06:
07:7b:1d:13:a3:5b:30:87:7a:dc:56:70:ba:49:b7:5b:59:f2:
ee:d2:90:67:3f:f0:01:cf:ac:32:93:7b:b1:d8:e0:bd:01:1a:
6e:54:0d:53:32:41:e3:95:0a:ca:b1:79:95:5d:42:8e:37:0b:
57:10:66:ca:bf:3b:c0:b4:9b:d8:4b:e9:f2:03:ca:8e:0f:f9:
27:37:f4:8f:40:ee:59:2a:c2:07:42:c5:d5:8c:a5:ab:1c:8a:
aa:df:0e:60:c6:7b:e0:3e:df:5b:79:25:d0:28:49:a7:14:f6:
2c:0f:f9:2b:69:98:d2:9e:78:89:21:5f:2a:81:3e:04:78:23:
47:af:27:d5:02:4a:05:91:23:53:a3:8e:db:09:58:fb:6b:3a:
ac:a7:e1:15:a5:07:5a:d7:30:52:ad:16:a9:0f:c5:a6:95:80:
8f:11:10:ac:2a:9f:a7:f9:4f:4b:4f:23:9f:9f:c7:0e:10:58:
ed:ad:7d:1a:62:c8:80:81:7c:db:de:a5:b4:d3:37:e6:7f:fc:
c9:2f:fd:87:8c:13:6e:79:59:b2:3d:ff:19:ce:e1:83:d6:bb:
70:83:0e:94:b9:d0:2e:08:b5:e5:2b:e1:13:8e:b3:5f:43:1d:
13:ee:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:59:58 2025 by rpki-client