Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: qWzbEAZPkz3C++SytsUV76z9XWsoIpKEIVhwdyRBcIA=
Subject key identifier: 56:D4:AF:19:BD:E5:04:61:6D:09:DC:3F:49:06:D1:DE:C4:CA:F8:9F
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 0197B8FD03872587B213B00343D5258A599F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 1565
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: M2xLOXC4PGY64INNLSHGVwhDIVOWPsHyzO7aWbW2d3A=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:03:87:25:87:b2:13:b0:03:43:d5:25:8a:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=56d4af19bde504616d09dc3f4906d1dec4caf89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:1d:61:e1:2e:0e:5c:13:e9:96:4d:1f:65:
f9:38:b3:cd:d3:2c:38:b9:9f:f3:a5:d5:37:1d:92:
72:84:4a:d3:20:28:c3:22:40:51:95:7f:9a:e6:32:
35:82:11:41:85:90:14:7d:e9:3c:eb:8d:f3:50:b5:
81:7c:9c:3e:25:28:a7:de:aa:1e:ad:67:9d:32:8c:
ee:78:6e:de:b8:f1:b4:01:e9:96:41:60:8c:eb:f6:
70:c9:3f:5d:7d:5c:b6:3e:df:69:97:93:32:39:d9:
5d:c3:e8:f7:d9:0e:b6:55:9d:e1:2a:89:c2:2f:3e:
51:e2:0c:51:05:1d:18:79:8d:fb:eb:c3:d7:77:d3:
31:eb:77:c0:13:7d:62:d8:31:22:5f:9b:cb:82:be:
69:79:31:ee:6c:81:10:04:30:c9:1d:62:13:e7:82:
49:f8:c5:d9:86:1e:b9:8f:a8:07:ca:60:f3:b8:68:
3e:3c:88:61:79:f7:da:6c:45:88:7a:95:97:4a:7c:
2b:52:ee:9f:14:41:47:f0:8a:4d:cc:56:bc:e2:32:
c6:e0:9f:27:72:43:b0:d9:dc:61:f8:12:8c:5f:fc:
5f:22:05:a7:83:24:12:99:3d:ca:a3:27:e0:9a:63:
8b:94:a4:6b:a6:b2:2e:60:fa:12:bf:bc:a1:4e:4d:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D4:AF:19:BD:E5:04:61:6D:09:DC:3F:49:06:D1:DE:C4:CA:F8:9F
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:69:60:9e:24:1a:15:cd:82:27:e8:41:e5:70:10:92:04:86:
ce:68:7b:1f:75:53:5b:07:12:3d:06:33:6c:a9:60:e2:3d:32:
a7:10:8a:4d:68:53:18:07:2e:49:dd:ce:c7:9d:fa:41:2a:27:
ec:72:d8:84:01:a5:c9:ff:cb:17:51:11:ff:ba:c9:6c:1f:9c:
30:af:0b:54:33:c1:a3:ef:b5:30:0d:74:e6:e0:4b:1a:fc:f3:
ba:0b:e8:7a:2c:ce:d5:1c:aa:7e:9e:a8:1e:56:9d:6c:2e:eb:
38:d2:02:fb:94:a0:db:b1:68:e6:7e:2d:92:36:eb:ca:59:66:
2a:44:b4:83:78:3d:7b:61:32:eb:e2:96:f1:01:d6:14:86:46:
c0:96:a9:61:61:43:15:dc:ec:ae:87:bc:3e:5d:52:56:ce:d8:
b9:7a:10:0b:3a:70:63:1c:56:5e:9a:ca:b6:b6:49:53:4e:ad:
c9:be:91:e7:05:f3:de:ca:51:a5:4f:94:68:e8:e8:15:c8:98:
4b:08:a4:5d:0e:e7:5e:2b:ad:0d:c2:0d:04:dc:60:f3:0d:7c:
d0:31:79:8a:da:67:c1:1e:79:bd:57:1a:ef:f5:e2:23:af:bd:
9d:26:b3:46:dd:31:cd:87:71:8b:d5:7e:8f:c8:b3:df:49:5f:
73:20:1a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:11 2025 by rpki-client