Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: Gc8P0LgXxANYdP+SAX3Eivxx34mjokfBVP0QHw+tBSo=
Subject key identifier: 5A:AA:6B:CE:A7:A7:BD:06:09:03:1E:69:C5:48:CC:22:1E:8C:18:42
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 0197C6136775BA162386D23D1F87C5749B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0253
Signing time: Tue 01 Jul 2025 13:00:49 +0000
Manifest this update: Tue 01 Jul 2025 13:00:49 +0000
Manifest next update: Wed 02 Jul 2025 13:00:49 +0000
Files and hashes: 1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: BTKXy+LSEpsU5xZc78jvEKnuvwL3sZWvyUGA8r54tEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:67:75:ba:16:23:86:d2:3d:1f:87:c5:74:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Jul 1 13:00:49 2025 GMT
Not After : Jul 2 13:00:49 2025 GMT
Subject: CN=5aaa6bcea7a7bd0609031e69c548cc221e8c1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:56:2d:47:c4:ed:c2:d4:da:9f:c7:79:69:
de:8e:51:b4:27:65:f2:23:ae:fb:9c:99:0f:dd:88:
04:1c:2e:45:b1:a6:20:1e:86:e9:d0:dc:a9:c7:d2:
9a:96:61:18:b3:5d:1e:f4:d0:d0:29:fc:51:ad:7a:
0e:a2:af:86:bd:ce:d6:c1:19:bc:15:1b:00:4c:5b:
8e:f2:1e:ae:f6:ef:6e:62:14:4d:ed:de:55:d4:de:
46:54:6d:d8:9f:1f:aa:a6:0f:06:89:df:65:c4:d7:
67:d5:cb:13:65:7f:0f:ca:a6:96:dc:b6:66:ed:6e:
31:95:a3:cf:c5:34:bb:14:73:3a:92:71:41:c1:c2:
4e:40:8d:78:37:bd:41:a6:b4:1c:06:b5:b3:07:53:
b1:93:4d:b0:a4:67:b8:58:45:7e:af:ea:fe:45:fb:
76:1a:37:11:ab:92:1e:94:9b:5e:0a:ad:77:58:57:
1b:d2:0c:fb:91:04:75:b2:e3:60:ce:46:97:d4:04:
88:46:17:5b:29:0f:7f:55:57:1a:58:4c:63:df:17:
9d:42:d4:48:73:49:58:f2:3b:7c:ec:02:ef:ea:8f:
c0:6d:93:ff:65:5e:92:bf:c2:84:3a:14:31:e2:ca:
9f:f5:58:e1:00:a2:8d:7b:bf:12:ad:a2:a1:d0:6f:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:6B:CE:A7:A7:BD:06:09:03:1E:69:C5:48:CC:22:1E:8C:18:42
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:9c:1f:5a:38:9a:e0:43:c5:53:0a:fc:80:fb:6e:15:ab:
b9:f7:46:55:d0:11:47:a5:cf:fa:09:b9:cf:b7:d1:78:fa:93:
69:fe:28:fe:7e:c8:ee:e9:c7:74:4e:f3:1b:00:3e:ed:1d:ec:
52:42:b5:63:af:59:9c:b3:97:73:51:de:37:de:16:8e:72:21:
3d:28:5e:e9:d5:1b:92:45:4f:00:9e:19:20:84:3f:02:31:eb:
f6:a9:2a:7f:81:c4:a0:e2:ae:17:63:3b:e8:d4:42:a4:e0:b9:
22:0b:bb:e5:33:22:e1:b6:f5:0d:c5:23:f5:4b:4e:39:50:68:
f1:a7:39:0d:eb:1d:3c:09:6b:e8:6e:d4:fa:06:1a:0b:8d:a5:
26:3e:76:6d:b8:6e:9b:50:b9:a7:fe:88:83:ff:af:50:ce:64:
58:f2:9b:79:65:4e:74:cd:40:8f:0a:d7:a7:b3:d8:58:29:31:
f7:56:2c:e7:70:8d:e4:c5:63:fc:ab:95:99:20:ca:ab:2c:c7:
bd:34:6d:06:4e:67:41:4f:5a:99:40:88:0d:79:c7:76:c4:66:
60:34:c4:a5:01:d9:03:ab:4a:7a:d1:29:b0:53:b5:6e:a1:24:
d6:e0:10:85:56:50:bc:a5:4f:94:c8:12:a0:df:e2:02:25:35:
13:97:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:41:01 2025 by rpki-client