Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: hQUnBcFu7TjQX2ts3PPi960938zXw3H8oA3ihvZZDaA=
Subject key identifier: EA:C9:A3:B9:08:DB:18:F0:35:D1:27:60:FA:22:FF:8D:90:F3:EF:12
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 0197B7EA6E37D75073E09F6E18B6AB5C1775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0A00
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: rsJbkQ2YO7SSGadudFd7kmT7DwfwejsvsbS0eWVooZw=)
3: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6e:37:d7:50:73:e0:9f:6e:18:b6:ab:5c:17:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=eac9a3b908db18f035d12760fa22ff8d90f3ef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:df:c7:71:b8:a9:b9:f8:ac:29:47:1e:10:
06:cf:ab:2a:b6:52:2a:c9:b6:fd:7a:99:5c:28:93:
70:9e:0f:a3:d3:83:82:6e:ce:5f:17:de:89:08:52:
bd:34:4b:08:05:48:64:d9:e6:37:c3:48:68:c4:07:
77:f5:6f:63:25:58:0a:1b:02:58:16:74:44:f4:39:
10:20:5b:42:30:27:fa:7a:e5:98:ce:d8:31:05:75:
56:da:1a:97:f6:a3:91:7a:b0:c0:a0:eb:33:78:ba:
b9:a7:db:ca:00:ea:1a:40:fa:82:4f:37:eb:fe:22:
ce:e9:0c:c0:9f:16:6f:75:01:de:59:c8:28:ad:d2:
94:6a:8a:d8:8d:77:ae:8c:58:03:75:51:07:13:a0:
d2:38:48:32:d1:31:e1:cc:90:35:09:8a:ae:23:62:
fa:04:66:7d:ef:58:d6:86:eb:bc:ad:f9:91:8d:33:
71:d8:ee:87:3a:31:0e:b0:7b:04:d6:e7:5c:09:b4:
7b:bc:aa:64:d8:05:3e:a0:93:dd:fa:00:2c:12:dd:
21:3d:fb:68:f9:71:e6:49:63:89:90:f3:25:f1:b2:
74:83:35:d6:cf:81:5d:bf:87:19:20:ef:16:ac:32:
80:83:2d:f0:00:a4:a6:8a:af:a6:d3:f4:ee:87:11:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:A3:B9:08:DB:18:F0:35:D1:27:60:FA:22:FF:8D:90:F3:EF:12
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e1:be:94:c3:cb:68:3b:07:fe:6e:fb:c3:7e:a3:1b:d5:c0:
30:40:d6:0a:44:2e:8b:7e:ae:dc:d7:4a:0b:fd:97:f2:b1:01:
82:fe:e5:77:ed:e7:60:2d:d9:76:9c:31:23:20:c8:3d:74:0e:
a8:33:48:66:65:a4:9b:e0:e9:cb:14:f2:9d:8d:64:69:e9:52:
a5:fd:6f:6b:f1:26:bb:61:7a:c6:2d:8e:4d:df:e4:e4:b3:5e:
68:f2:02:ed:d8:f6:d0:e8:f7:26:d7:0e:3e:83:03:a5:b5:ad:
f5:93:d7:98:f1:d5:82:72:4a:d5:a7:6f:5c:96:f8:e2:b7:31:
d1:f7:61:90:b3:b8:97:38:91:a0:d2:62:04:b4:34:23:43:95:
e9:0f:9f:d5:42:45:3a:59:79:93:1e:0a:77:02:7b:e5:cb:a3:
d8:cf:35:f5:d6:f7:b5:61:31:2e:5e:f3:d2:b8:1b:53:34:f6:
12:14:bb:95:71:95:56:14:4a:74:0f:a6:b1:92:c2:84:8f:fe:
ea:9e:f9:fc:ae:95:e7:86:66:ae:f1:e0:c2:24:5e:00:52:5e:
e0:e5:46:db:56:56:76:ae:cb:7d:b8:2c:02:9d:bc:df:fa:b8:
b4:3c:0d:af:9a:bd:8f:15:0b:1d:11:f0:5a:28:97:6c:25:ad:
50:13:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:18 2025 by rpki-client