Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
File: k0S0h58Z7nGaNRRjABcm9obWWe8.mft (raw, json)
Hash identifier: 1MF2mYYOxfW/QSl5Isr4FPjMKjOEhXQhwLvevcTl6oQ=
Subject key identifier: 5F:58:D0:F4:CB:83:BF:77:8E:70:DC:83:AA:11:92:B8:6B:F1:22:7B
Authority key identifier: 93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
Certificate issuer: /CN=9344b4879f19ee719a351463001726f686d659ef
Certificate serial: 0197B70E5E578CEF89432C22A29D8F4A806B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: Sp6LS-Lr7aNgCkiG-x4vIYL0m7M.roa (hash: 4a/RW16MYDyNLA++zl3ynSiVWGswaNsaMa2lua4RkWg=)
2: k0S0h58Z7nGaNRRjABcm9obWWe8.crl (hash: U95YfQuvvPFlyoQUtp9UCFhkUFG+f/GjFKYtHXgkBs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5e:57:8c:ef:89:43:2c:22:a2:9d:8f:4a:80:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9344b4879f19ee719a351463001726f686d659ef
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=5f58d0f4cb83bf778e70dc83aa1192b86bf1227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:83:73:5a:a3:a2:6e:ed:d0:0d:b5:98:8d:
fa:67:ab:eb:da:c0:6c:f9:12:95:68:1c:1a:09:7b:
39:39:e8:a9:f1:83:0f:29:b3:4a:e5:2d:d3:dc:96:
c8:57:00:f1:ca:c2:ae:2c:b0:9d:b7:05:55:d3:cc:
b0:b6:d2:3d:bf:a0:b7:c4:97:45:c7:3c:74:bc:fc:
af:4b:8d:77:cb:82:36:cc:ec:e6:cc:eb:ed:f0:92:
33:51:82:8d:33:97:6e:0b:c8:f2:e2:37:33:6c:3f:
bc:5f:d7:3c:11:9b:8d:f4:ae:a3:3f:ba:41:c1:b6:
8b:ef:9e:0e:b0:c7:20:8d:cb:e4:e3:93:02:ec:4b:
1c:25:b2:76:9b:33:cf:f9:07:ea:36:b5:ec:f9:81:
ff:af:f0:8c:49:fb:60:66:cf:85:04:6e:d2:34:7e:
e5:1a:c7:e3:6c:a9:06:b9:04:c6:72:f5:fd:ce:7d:
fe:50:97:34:8f:58:8f:f2:5d:54:1d:b2:4d:61:71:
21:b3:1d:fc:b6:91:d6:96:df:81:6d:7b:8b:90:4a:
35:11:31:9e:3d:0b:38:50:8c:4c:c8:b2:06:44:d2:
aa:e4:20:a5:cb:bd:88:ce:b4:a9:6c:f1:db:5e:aa:
8c:51:7e:5e:e1:13:ce:5e:a8:17:7f:ae:fe:ba:65:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:D0:F4:CB:83:BF:77:8E:70:DC:83:AA:11:92:B8:6B:F1:22:7B
X509v3 Authority Key Identifier:
keyid:93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1b:1b:d4:75:03:c8:f6:71:76:49:88:06:34:e8:be:77:95:
7f:74:cf:a3:a8:7e:43:a6:03:e6:e9:ab:14:28:40:be:23:cd:
26:26:52:22:5a:fa:80:98:2d:0e:28:3c:fb:6d:ba:75:eb:8c:
61:64:2d:82:56:5d:ed:97:64:8e:99:f4:8a:45:95:ec:e1:f5:
44:62:87:8d:0b:69:ff:5a:da:a4:8b:ce:67:fd:75:a4:cf:fc:
92:78:8e:63:c6:f7:f7:fe:3f:97:1e:30:0f:7b:57:ee:41:d5:
d8:f5:3e:10:11:10:3b:31:ad:62:ea:b9:8f:3c:1f:44:cb:e8:
be:5b:4f:b8:7c:d1:4a:88:c5:dc:e0:6e:00:f9:f3:5d:94:20:
ef:78:01:99:b1:e8:28:04:0f:e0:5b:44:f2:06:13:17:16:6a:
da:a6:28:6d:11:14:19:78:61:7d:cf:b9:7e:70:01:c5:83:3c:
28:e3:74:6e:ec:27:db:1d:95:09:c7:29:a4:88:40:fb:01:91:
85:4f:13:72:05:47:3c:26:5b:92:c6:db:8f:75:9f:fe:fc:71:
5b:91:2a:28:2b:06:f8:be:c3:d0:d0:ca:5e:0c:fe:50:4a:f4:
79:74:bc:f7:75:0a:81:a4:a6:16:8e:63:17:77:5f:e2:08:21:
5e:70:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client