Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: s2Io7pG/8kAMRdVhdXqIvnnHe//YAd/0wiJLn2Y7le4=
Subject key identifier: 58:8F:D5:6D:FA:84:DD:82:39:D6:AA:82:72:EC:A2:87:67:A5:0F:75
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 0197C493207956BE392181D27AE229909180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 146D
Signing time: Tue 01 Jul 2025 06:01:05 +0000
Manifest this update: Tue 01 Jul 2025 06:01:05 +0000
Manifest next update: Wed 02 Jul 2025 06:01:05 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: fzv/H1boJ4ziYrgBts/FOgwWRKBIFh+7+bhZHVJxAFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:20:79:56:be:39:21:81:d2:7a:e2:29:90:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Jul 1 06:01:05 2025 GMT
Not After : Jul 2 06:01:05 2025 GMT
Subject: CN=588fd56dfa84dd8239d6aa8272eca28767a50f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:54:4b:7f:ba:af:90:bb:ac:81:7a:d9:65:
1a:10:03:19:a6:34:c6:22:a4:0e:eb:9b:62:86:d2:
67:0f:b9:c6:ce:b0:cf:a0:3d:68:56:0e:13:de:25:
a3:80:26:90:71:77:7c:b0:2d:7c:b0:02:b2:db:21:
2c:2f:f8:3e:7a:54:29:25:b5:77:af:ee:0e:61:af:
33:23:45:be:de:4d:4d:82:e0:74:8d:40:cf:d7:a3:
56:9b:cc:dd:43:6c:69:18:44:74:59:5a:c9:0f:f2:
ae:00:9e:11:b2:69:d6:1d:94:62:7e:a5:44:ef:f9:
95:45:ea:7c:13:c9:0f:66:c2:5d:ba:20:53:d0:06:
64:1c:d1:8e:1c:75:7b:c6:53:c2:d6:93:6a:22:65:
07:67:0b:39:da:b1:7f:04:61:b0:df:76:c8:5e:5e:
a2:9c:c6:dc:94:64:76:32:11:bc:8f:ac:5c:c5:01:
ca:42:3c:a8:4d:1c:d8:c7:84:74:87:b0:57:5d:cd:
8f:d9:d7:1b:32:7c:79:02:f7:85:f2:dd:43:d6:61:
e4:b7:84:a2:16:c2:13:d3:32:c8:ca:b2:80:c9:b2:
11:40:29:28:ea:fa:59:35:fc:9d:77:45:1a:95:4f:
2b:54:a9:5e:02:ce:04:b5:c6:5a:55:3d:09:20:5c:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8F:D5:6D:FA:84:DD:82:39:D6:AA:82:72:EC:A2:87:67:A5:0F:75
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:55:0b:58:ba:fe:d6:39:64:44:09:f3:a5:57:4f:ae:df:
a2:15:7a:13:2a:07:96:11:65:f7:4b:9b:4f:f8:74:04:f6:74:
1c:5d:96:69:aa:56:fe:ab:3c:e1:d5:8a:72:51:0a:58:b3:dc:
8c:b4:bd:9d:76:3c:1a:52:1e:f3:cc:7c:2c:fb:01:1f:ab:05:
18:66:72:6b:5a:19:5b:8c:9e:59:7f:c4:47:01:b8:90:75:cc:
16:d9:bc:71:1b:2e:bc:a7:27:66:a3:8f:dd:9d:38:a8:84:f4:
af:07:32:e8:12:e5:88:17:30:66:22:c0:d8:7b:57:8b:49:dc:
62:20:6b:d0:89:28:bc:84:4c:b0:be:87:51:d5:c6:17:89:b0:
d7:c9:5a:89:57:45:5c:28:6a:4d:13:70:ca:0f:80:ec:ee:7c:
e5:84:13:a4:e3:95:88:7f:d1:a4:91:53:a9:15:85:37:ea:8f:
b6:68:75:3c:2a:a3:06:c5:40:65:a0:a9:c5:4f:b7:09:f2:31:
52:68:b2:09:a3:09:93:94:b3:e2:73:74:7e:e4:a8:ff:29:0c:
1f:60:8e:8f:24:f0:12:71:33:c3:fb:4f:21:25:2e:7e:75:c8:
9a:a7:ec:28:60:48:2a:b6:e7:74:5f:25:6e:1d:df:b6:bb:a4:
b5:ff:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:18:16 2025 by rpki-client