Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: eYa+06mKYxcl6HssC8XJTIMpdg1VgPFCr7FRdwS99Lo=
Subject key identifier: 8B:71:88:3F:7C:63:AF:FD:6B:04:0B:40:3D:CA:61:15:82:DE:3C:6C
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0197B6A0D6E085925261704E056A89DB85EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: LCY/f2hL5iLPQI7NoitOCKEkH/Q/5UHlwL64s7h5C6g=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d6:e0:85:92:52:61:70:4e:05:6a:89:db:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=8b71883f7c63affd6b040b403dca611582de3c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:a0:5a:12:60:53:0f:8d:64:93:43:88:ac:
21:0a:53:72:b7:65:a5:ff:ee:3b:12:49:e3:7d:e3:
cf:44:dc:9a:83:38:0d:20:b1:55:31:95:a9:a9:ed:
fd:f3:23:92:b8:52:d0:c8:5d:0f:a1:8c:7f:25:ee:
a0:e8:97:50:ab:fd:a8:f3:10:4f:d6:01:00:06:b5:
67:f6:17:b9:78:87:0c:c5:02:5d:01:c5:ca:d9:4f:
1c:47:63:41:cb:40:e2:d4:f1:0f:b6:d0:fd:2d:18:
2d:87:f6:91:bd:e3:5d:53:05:1f:32:48:e9:a9:2b:
7b:94:65:da:73:b9:6a:1d:3f:13:ad:53:2f:bf:5c:
63:a2:c6:9c:d4:fa:c8:58:a3:82:8d:d0:b8:25:91:
c5:46:7c:b9:f0:cd:5c:2e:0d:85:16:63:17:63:cf:
81:5b:e1:08:a3:be:e6:35:e9:a2:4c:c4:95:39:f7:
79:a0:bc:5f:53:00:da:bc:07:f7:9f:60:20:f7:7b:
64:ba:dd:5e:87:15:ea:33:ba:46:57:5d:a7:8c:58:
f7:dd:41:3d:a5:51:87:4b:40:d9:4f:c1:3e:90:50:
31:05:ae:60:37:9f:f9:0e:03:42:68:85:9d:9e:1d:
24:05:a9:8d:07:64:0e:c4:f4:70:63:fc:55:d6:71:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:88:3F:7C:63:AF:FD:6B:04:0B:40:3D:CA:61:15:82:DE:3C:6C
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:4a:15:4a:16:e9:bb:01:09:e1:c6:8b:a1:79:d4:a2:e9:
fb:c4:f6:2e:eb:0d:a6:40:05:8c:62:23:5f:ca:81:78:ed:aa:
41:2c:65:9c:98:db:30:eb:93:c1:68:77:2f:2d:ed:2a:ce:00:
4b:bd:4e:80:66:94:de:ef:3c:7c:39:06:9f:dc:5f:05:a1:5f:
38:1a:f1:dc:60:af:e1:58:e0:75:d9:1f:0a:27:88:dc:25:0e:
1e:78:e9:25:33:61:ec:96:6d:70:cf:0d:f5:aa:80:47:2b:dd:
50:3a:f9:55:81:39:3a:6c:f7:68:68:dd:7b:60:1b:8f:24:3a:
df:48:4c:c2:16:fd:d6:4c:e9:5e:7a:dc:1c:3f:f3:d0:d7:8c:
ad:fc:a1:c4:a2:43:08:72:a4:e6:74:e3:e4:f7:29:24:ed:7f:
4e:b5:48:98:5b:5c:06:93:ee:4f:ab:81:a7:2a:7a:f0:8f:8f:
4e:4a:23:93:43:b6:68:1c:0c:eb:eb:ae:66:8c:4b:46:58:69:
57:7f:02:db:bb:72:ac:82:2d:fe:1e:98:95:94:85:63:e5:14:
8f:f7:34:f9:37:b0:4a:ef:7c:38:45:20:61:e4:44:38:10:c4:
1d:ce:a0:c0:1f:66:ec:82:f7:89:1b:4e:db:80:93:2c:ff:86:
2f:6e:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:18 2025 by rpki-client