Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: e8eZJOJ1wpGiI2KcApvbYc38R1tRULd0jcM6DM/lPTM=
Subject key identifier: 1E:CE:87:7D:09:55:DE:E0:FF:29:F7:CF:0D:68:61:9A:85:BA:52:38
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 0197B8FCFDDE8BFC335A6AF1A0B52882F5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 0FED
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: E4x5qDtLuw75Su37OWYLpkFS9BSJOtg7qqO7t1+660Q=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fd:de:8b:fc:33:5a:6a:f1:a0:b5:28:82:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=1ece877d0955dee0ff29f7cf0d68619a85ba5238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:db:85:ce:da:34:ed:26:2b:1a:53:ca:40:
77:53:a7:aa:09:db:ef:6b:58:4c:e1:6e:09:a4:e2:
7e:59:a9:b2:48:bc:ce:ce:fa:65:86:9a:38:e8:e9:
d3:2d:31:f1:cb:ef:a8:6a:ad:91:14:a7:77:75:d6:
10:7c:ac:21:a7:c3:8a:1f:6a:78:7b:17:3e:aa:eb:
98:cf:c0:22:92:cf:f8:99:30:6a:05:1b:9c:fd:0b:
49:ee:b7:aa:cc:88:ff:84:38:62:68:95:e0:12:b7:
72:ef:8b:a8:91:3c:81:7e:bd:9c:93:85:47:cb:c5:
10:0d:09:b9:4c:8d:36:a8:5d:c6:5f:47:da:33:c7:
cc:87:a0:35:48:ef:44:e9:4d:62:be:c0:40:1f:6a:
0e:90:61:af:c5:56:96:0a:cf:2b:c5:6f:73:f9:84:
c6:91:82:75:fe:c5:ef:e3:f6:3c:67:79:69:89:3d:
90:d5:5c:8c:2d:65:21:bc:1b:38:d5:74:83:aa:f6:
94:80:7a:05:d0:4f:12:70:e2:fd:d0:52:c5:d0:e4:
6c:5c:ac:29:29:a8:ea:36:f8:08:05:29:16:9e:d5:
33:ac:83:c3:82:98:fc:06:aa:ab:d0:d7:06:a3:b3:
3f:ed:86:89:5f:c3:42:bc:e3:bf:01:86:35:fe:f9:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:87:7D:09:55:DE:E0:FF:29:F7:CF:0D:68:61:9A:85:BA:52:38
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:76:af:da:80:8b:4f:fd:4a:b8:15:52:c6:6c:f5:56:3a:
bb:05:3a:2a:ca:02:43:c5:cc:e1:a7:d2:60:40:b1:17:22:70:
b0:da:5b:d9:76:36:bd:33:7f:ef:17:1c:d9:e5:29:14:8f:f3:
70:4d:c7:5d:11:96:c2:f6:3d:dd:30:b7:5a:40:86:6e:67:c5:
f0:4c:8a:7e:dd:1d:d4:19:c0:2c:90:6c:c3:30:bb:24:d2:5d:
05:0f:71:2a:60:9b:6b:b9:d5:2c:80:d4:f5:72:09:f6:30:e9:
78:0d:36:61:2d:dc:df:de:2f:8d:9c:e4:c9:7c:68:17:3d:bb:
a6:86:b0:de:cd:7d:f1:f6:95:37:83:5b:85:61:36:1e:09:83:
71:29:8e:70:36:dd:fe:55:d7:a3:fc:68:e3:87:d5:31:77:24:
54:cb:9c:6f:1b:6c:e9:be:13:62:7e:38:fa:62:88:77:0a:16:
1b:9a:f4:e9:8f:77:a0:fe:69:08:fa:88:46:25:17:2e:55:56:
6f:4f:06:52:7c:fe:47:a1:b1:e0:87:02:92:2b:8b:33:67:e3:
42:9b:78:15:ef:b8:75:e9:0e:9d:c0:44:7d:9b:a2:e1:75:ed:
e4:d4:18:10:03:37:36:8b:23:b4:75:c8:98:8f:8f:84:77:b3:
91:37:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:30:41 2025 by rpki-client