Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: l/HWoj6R6jgg7thxApMTGvBd3L+xFAeg2nWU6NddE6s=
Subject key identifier: 43:63:BA:C8:08:8B:2F:A8:B5:CD:CD:F0:94:2F:E9:2C:1F:DC:E7:DD
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 0197B70E71375A4AD432DBBB5A9284A1D937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 11A3
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: Oc9Od1Q1qUh20jOMwhJ7dFW2HRCb06yJBuGVzuZ4e+A=)
2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:71:37:5a:4a:d4:32:db:bb:5a:92:84:a1:d9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=4363bac8088b2fa8b5cdcdf0942fe92c1fdce7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:fd:eb:be:55:d1:9a:e6:df:bd:ce:61:b0:
0f:1c:8a:84:1d:30:15:b9:b7:b4:5b:3d:da:05:69:
2b:75:3c:68:d6:d0:25:6f:87:ff:f6:41:e8:ea:de:
c3:4b:b8:5f:19:6c:47:bf:b8:41:46:eb:43:dc:ba:
b4:2a:10:ff:b6:0c:91:16:65:98:e5:24:82:b9:4a:
94:fa:29:a6:44:c0:22:aa:c3:b4:80:3f:00:54:21:
84:34:88:e7:01:1d:26:3a:f6:46:19:9a:e1:3d:d4:
b0:ad:ca:df:ef:45:e6:92:c9:3c:34:f3:31:c3:6a:
bd:12:02:cf:29:21:19:3f:57:55:8a:57:96:f3:ac:
7b:69:df:a8:11:23:3a:ab:46:14:ef:6c:0b:cb:f1:
20:d6:18:02:04:1a:96:da:cc:89:a5:c9:43:5a:87:
ae:db:8f:f7:f9:0f:22:8e:de:82:3a:eb:8d:79:53:
12:3d:d5:e0:7f:3c:c1:7e:53:e5:56:4a:97:50:91:
e7:74:dc:91:82:0a:cd:7b:4d:a5:e4:99:e5:c7:0f:
c8:21:45:c3:94:77:11:7f:1b:62:0f:8b:47:ad:c7:
b2:c7:67:0e:20:85:88:95:db:8e:2b:80:3f:65:b1:
3b:73:a5:0a:22:64:1c:7e:02:dc:90:99:52:c4:dd:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:BA:C8:08:8B:2F:A8:B5:CD:CD:F0:94:2F:E9:2C:1F:DC:E7:DD
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:4d:17:35:45:5c:30:77:2b:ef:4a:c8:1a:ec:39:cd:7b:
45:1e:95:a3:3c:cc:92:0a:40:24:14:07:ce:47:50:73:2d:8f:
23:bc:b6:a1:f9:19:35:51:81:fd:f3:d6:77:52:71:85:ea:84:
c6:16:ed:87:8d:8c:77:c8:62:fc:a4:5b:7a:92:0c:90:dd:65:
fe:49:82:87:fa:14:9f:cc:87:b0:44:bd:d8:59:0f:0c:1b:95:
c1:d1:06:d7:17:b9:2b:b9:e4:47:43:7a:c6:72:18:ab:92:80:
e3:9e:a2:8b:b2:3a:f4:5c:9c:0a:1c:05:40:a0:45:64:dd:19:
02:80:3c:8b:7b:9c:d1:96:63:f8:49:12:03:3d:91:de:98:07:
12:3c:1c:f9:ad:41:92:60:09:b8:0d:c3:e3:5e:45:70:84:59:
5d:e5:55:86:16:eb:bc:95:f3:8f:63:6d:c2:05:08:ee:49:d9:
f0:f4:d5:f8:0a:7a:60:3f:43:e1:98:7a:85:af:b8:f5:fc:79:
4c:6a:88:5e:45:43:35:9d:35:bc:0b:12:41:3f:8b:50:3b:35:
1b:1e:ba:f7:66:77:5a:f3:86:92:40:69:a0:30:b0:27:0c:08:
10:f6:c3:9a:8f:a3:7e:5a:0d:c5:75:aa:d6:81:a1:b4:ee:39:
0b:59:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:09 2025 by rpki-client