Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: 2V2uyPZem9V1bMw8FGj+Ki21+e1yRTYPV+HdX+MTWLU=
Subject key identifier: 33:8F:5C:FA:40:3B:90:59:C3:C6:C2:A9:F1:B5:98:04:C5:2A:7F:26
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 0197B88F95686F67FD3DF3C142E19D0B8268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0193
Signing time: Sat 28 Jun 2025 22:01:46 +0000
Manifest this update: Sat 28 Jun 2025 22:01:46 +0000
Manifest next update: Sun 29 Jun 2025 22:01:46 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: frXjAmUPH6EyWtDmTnERa6tud8fOsobmnmPRYCmUCuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:95:68:6f:67:fd:3d:f3:c1:42:e1:9d:0b:82:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jun 28 22:01:46 2025 GMT
Not After : Jun 29 22:01:46 2025 GMT
Subject: CN=338f5cfa403b9059c3c6c2a9f1b59804c52a7f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:ff:a1:04:53:51:59:7f:8e:0f:44:ef:85:
76:50:33:16:69:11:59:6e:9d:1c:f4:c1:4e:25:67:
6e:f1:da:fa:dd:d9:1e:3e:cf:ac:1d:ce:a4:60:ef:
28:15:e8:58:be:5f:30:49:83:e6:21:69:53:01:ad:
59:3f:1f:8d:c4:67:61:d8:fb:39:16:84:eb:07:da:
79:83:27:4d:ac:f8:03:bb:2f:be:7f:98:06:10:b8:
9d:7b:89:8a:a3:e4:7e:9b:1e:6d:14:4b:9b:1c:0b:
21:b3:91:ec:22:17:e8:84:4b:be:39:41:2e:c8:61:
65:2a:63:46:e5:92:7f:42:32:05:ca:01:95:c9:d9:
ad:93:61:07:1f:47:f2:eb:7b:d6:9a:16:8b:2c:4e:
8e:92:1a:c0:b1:7e:98:5e:2c:23:da:14:64:d7:e9:
8c:38:e4:bf:64:5c:e1:b9:3a:3c:48:ab:83:c2:6c:
6b:9e:98:17:f2:cc:f5:49:79:7c:48:15:77:e6:ec:
ad:af:c4:0f:4c:55:5b:4e:ab:21:6b:ef:06:89:93:
84:ed:23:ca:13:76:08:0c:da:d5:e7:68:3d:e4:70:
93:4b:06:3a:cd:9a:ab:03:0c:4e:c4:0d:56:d0:cf:
e6:04:63:46:86:db:74:67:96:49:67:01:39:1e:a0:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:5C:FA:40:3B:90:59:C3:C6:C2:A9:F1:B5:98:04:C5:2A:7F:26
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:b1:86:52:3a:88:e1:2a:5c:74:80:59:70:92:54:0f:5e:
f7:2a:b1:5d:a9:31:5b:de:b8:74:49:32:37:7d:12:fa:aa:03:
b0:89:f3:78:c8:58:64:52:e8:69:99:d2:85:55:2b:f3:8e:1e:
ec:99:d9:ff:3f:87:d8:4b:b7:f5:65:3a:ac:c9:46:d9:66:f0:
2d:9f:d7:64:df:41:07:c8:eb:8a:8a:85:a7:c7:84:ca:d5:4c:
a8:53:b7:e8:64:0a:85:9f:f6:38:3a:44:bc:0e:3b:85:73:06:
87:56:09:8e:7b:34:bf:b3:0a:02:38:f8:a3:39:6f:bf:8f:13:
1c:1e:d0:d2:27:fa:48:68:df:60:16:b9:3c:45:d6:3e:05:0e:
7e:7f:49:9b:b1:84:ea:da:a1:53:0c:9b:b3:d6:20:4b:dd:eb:
67:76:5b:af:68:a1:2e:61:75:01:6f:ae:02:98:7e:8a:77:4a:
01:07:95:82:ea:34:9e:59:8e:4a:64:24:b7:5c:89:e7:3b:82:
b3:f9:c4:32:e5:ac:73:84:62:bd:d5:c9:ed:04:dc:a0:07:47:
cc:40:f4:70:aa:5d:9f:2d:20:df:cb:c9:7b:56:7a:ea:33:4a:
df:aa:d9:83:9c:fb:ed:d5:54:42:57:8f:7e:79:da:32:64:cb:
cc:f6:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:35 2025 by rpki-client