Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 460U1bvrN7x4KDBWlBdnwJuMNkmp+1t4YChZTYodUSc=
Subject key identifier: CC:95:28:D2:18:27:48:ED:6F:F0:1C:6D:41:50:1F:2D:D9:0A:FE:C1
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0197C5A5F19AB05FB4145F4FDB21F3F08FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1495
Signing time: Tue 01 Jul 2025 11:01:16 +0000
Manifest this update: Tue 01 Jul 2025 11:01:16 +0000
Manifest next update: Wed 02 Jul 2025 11:01:16 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: TeW/edNvCNcgpTb42pOj3u3gg1wyJl4PFIpUIZy0XxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:f1:9a:b0:5f:b4:14:5f:4f:db:21:f3:f0:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jul 1 11:01:16 2025 GMT
Not After : Jul 2 11:01:16 2025 GMT
Subject: CN=cc9528d2182748ed6ff01c6d41501f2dd90afec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:93:ea:de:0e:80:8f:81:81:f4:14:ef:45:
62:cb:9d:e7:97:0a:61:33:34:60:e7:21:41:49:23:
15:a4:63:4e:90:5c:be:b8:09:51:aa:48:3e:65:0f:
c8:b5:c9:88:a5:c7:64:8c:3d:43:86:28:3f:36:4b:
c7:2d:f6:cc:e6:bb:57:c5:c5:53:cd:88:3e:bd:b7:
52:d4:08:e8:bb:f7:b9:64:4b:e0:c6:34:32:00:12:
98:36:2c:33:eb:c0:d8:99:bd:49:8f:a1:87:e3:e4:
77:c9:5b:db:af:39:cd:35:03:26:52:88:75:87:28:
99:5e:90:98:26:71:4f:d7:87:38:02:1f:5f:f7:26:
3c:fe:ed:67:bb:f1:51:d9:3b:bf:34:15:30:6c:a3:
01:8c:28:62:f9:19:e8:ca:24:71:47:5d:ab:11:95:
3f:58:b1:22:55:ac:ae:ca:fb:d4:0e:06:3f:98:55:
f3:01:83:81:91:e2:c6:d0:a3:d2:cf:e4:6d:be:37:
4e:a7:78:ff:15:e7:d2:cc:48:b1:dc:25:5b:ed:da:
50:fa:68:ce:72:8d:56:e3:6e:a5:e3:34:b3:02:7a:
da:7e:27:dd:50:1c:db:49:95:8f:34:1c:e5:82:78:
c6:60:91:3c:ee:cb:9b:62:31:37:02:e3:1c:0f:60:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:28:D2:18:27:48:ED:6F:F0:1C:6D:41:50:1F:2D:D9:0A:FE:C1
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:8d:d0:c5:78:89:91:74:3d:bb:33:80:57:25:3c:af:6d:
e8:9a:6e:87:cc:85:66:25:be:2b:1c:93:a4:77:e4:9b:35:63:
8f:6e:df:75:55:bc:6a:25:9f:44:5f:5f:ef:28:b9:11:6e:53:
5b:a8:bf:d0:7c:78:0e:05:ec:73:49:fb:bd:fb:14:5f:a1:64:
4c:1a:06:4c:14:94:d6:47:31:4c:bd:65:90:61:17:a6:7e:f9:
6b:99:b2:e5:68:84:fe:4a:90:12:b1:d9:96:5e:39:9c:cb:4f:
bc:b6:e1:ce:4d:dc:7e:d3:76:c8:24:0c:48:b1:c1:76:95:80:
42:e9:5b:f5:9e:f5:2e:a4:54:26:ed:32:ac:49:4e:2e:19:5d:
b2:aa:9b:8f:b0:76:10:ed:07:3e:39:af:3d:b4:e4:0a:2a:52:
a5:70:9e:50:42:a4:01:78:8a:d5:dc:f3:da:49:bd:5b:20:ae:
6b:1a:34:70:cd:df:31:b2:5f:85:ec:90:bc:5c:fc:aa:88:68:
8c:23:f0:8b:60:11:8e:0a:60:03:4b:83:cb:0f:20:33:03:17:
08:0c:2d:1d:2a:14:b3:3d:34:63:57:0b:45:9c:51:82:27:ce:
a3:2f:f2:c2:10:f7:f2:7c:f3:db:48:66:f0:c7:39:cc:36:85:
ca:c8:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:01:32 2025 by rpki-client