Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: qNQVqudljZ3ZV76ONAh/gxhsnZQKzw0NH1AkFjPfuec=
Subject key identifier: 56:A9:C1:5D:88:E5:A9:B2:DC:DE:06:4B:50:A0:8D:7F:DC:21:93:65
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 0197C2388FF4DCEF35478329B1F7CEAA542D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1228
Signing time: Mon 30 Jun 2025 19:02:55 +0000
Manifest this update: Mon 30 Jun 2025 19:02:55 +0000
Manifest next update: Tue 01 Jul 2025 19:02:55 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: RG1Y+ST6dIGXgPBRWD9u6t15F2eL3xcf98vSXY5POZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:8f:f4:dc:ef:35:47:83:29:b1:f7:ce:aa:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jun 30 19:02:55 2025 GMT
Not After : Jul 1 19:02:55 2025 GMT
Subject: CN=56a9c15d88e5a9b2dcde064b50a08d7fdc219365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:bc:ab:7e:f0:6f:c9:38:38:09:e4:59:76:
0e:ec:34:c5:e7:07:10:c0:dc:4a:fe:f8:31:cb:89:
ee:23:15:e8:38:f2:0c:08:a0:4e:8c:63:55:f6:64:
c1:ed:3e:77:c7:bb:d5:52:8c:9e:ba:57:07:76:a0:
c2:2c:86:6d:db:bf:bd:42:cb:a9:89:f5:7f:ed:1f:
39:2a:24:71:01:2a:21:21:ba:69:b4:8c:4f:01:af:
82:69:d8:ba:d9:5c:d7:44:a0:ed:11:91:0a:54:f4:
70:a5:a5:0b:a3:a4:6b:86:95:d8:b4:55:60:3e:9c:
8b:e1:30:2f:10:cf:b8:85:e2:dd:67:38:82:7f:e1:
e7:71:d5:5b:2a:ab:a1:73:9d:89:db:b4:b3:6f:5e:
b7:ce:e6:75:6c:3b:3b:d8:5c:e6:de:19:57:cf:1f:
c5:9c:d2:13:dc:23:a6:14:d0:40:4f:d8:c2:65:3a:
dc:d2:7a:94:be:04:62:d5:c0:8b:4a:88:a0:a2:2b:
69:57:14:75:0e:66:1c:d0:e5:ea:31:08:0b:7f:ce:
80:0e:42:92:2b:d8:b3:60:4f:9b:3d:98:3d:b8:b5:
be:5f:82:ad:38:44:cb:09:b2:0e:a8:d5:ed:dc:4e:
cc:96:bf:62:c0:e9:18:ad:2a:e8:b6:be:b2:a6:5a:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:C1:5D:88:E5:A9:B2:DC:DE:06:4B:50:A0:8D:7F:DC:21:93:65
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3c:69:af:72:ae:e6:df:7b:04:7b:3c:83:df:fd:f4:09:a1:
ca:86:6a:04:24:73:c1:2b:98:38:5a:64:43:ef:a9:a8:4a:a6:
d3:53:41:ef:52:e7:f8:03:bb:c5:16:76:e4:28:85:c0:e0:92:
33:74:f6:1b:27:b3:8e:6e:a6:43:19:3d:47:4a:b2:05:1b:b0:
5c:2a:ff:07:56:9b:20:8d:63:3e:27:36:06:71:ad:97:a4:64:
13:eb:c7:9c:a8:89:24:42:cf:e0:8d:df:94:ee:35:37:4d:cc:
dd:03:7c:29:b0:44:51:3d:16:cb:7b:5f:40:2e:80:82:d2:1a:
4e:88:c2:6f:1e:4c:ab:ed:8c:2f:f6:c6:86:de:55:d2:60:58:
b4:76:f3:fe:07:e9:58:a3:f5:1c:2d:85:47:4b:bc:54:4d:3e:
fc:4a:47:c5:25:7a:a7:e1:aa:c2:9e:b2:9e:20:be:7f:1a:b3:
3e:d8:ee:7c:ae:b8:d0:8c:80:07:44:40:4a:bf:22:92:69:3f:
c7:8d:ee:a4:f1:81:42:ba:20:28:b7:25:a4:b7:4f:23:b2:a1:
8b:3f:7a:36:f5:98:d0:ba:2f:a5:3f:82:d7:9d:67:7b:3c:c0:
04:fb:fe:86:88:66:74:bb:c8:0b:a3:05:7e:6b:5a:06:3b:9a:
51:3d:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:59:18 2025 by rpki-client