Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: uo2nFma6KMGxzYO+SNPBxM2O378qjOBZvUFZZ9GKAI8=
Subject key identifier: 8B:B9:D0:E6:9F:7E:AE:C7:EC:2F:40:AE:E5:A7:D0:87:C6:F0:5B:AD
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 0197B6A0F474FDFDB4F8CD1C9305A7FAA676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 103D
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: 1XjTK9MOYtpc+rkyASoj0+SQyBudilSmkCMjhzssK+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f4:74:fd:fd:b4:f8:cd:1c:93:05:a7:fa:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=8bb9d0e69f7eaec7ec2f40aee5a7d087c6f05bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:88:f5:0b:4d:76:1b:16:eb:81:a7:c0:68:
ce:0e:43:1c:10:8a:bf:a0:f1:35:c8:4a:4c:ee:31:
bc:fc:69:b1:d3:bf:b2:dc:42:da:d6:fe:99:df:44:
5c:88:22:0f:1a:5a:52:ef:55:9d:ca:41:72:16:c6:
5f:7f:c5:bd:85:10:d3:72:2a:96:93:38:00:bc:65:
3a:32:f5:41:1e:97:bc:42:66:4f:52:3b:bc:96:54:
85:ff:85:84:c1:c8:28:6c:c8:37:54:e3:88:a6:e4:
0a:08:e9:53:89:c4:0d:3f:34:1f:53:83:13:aa:ae:
25:66:02:6a:e7:a6:d2:3e:1f:a1:da:9f:7a:d5:c6:
ec:03:3c:fc:b1:f5:91:30:26:f5:67:c2:04:18:4f:
65:50:4b:d4:10:ff:0b:f0:a0:41:7e:5e:32:5c:14:
7b:06:a7:ee:c8:3c:f3:1f:13:7b:5f:64:81:fc:09:
5c:7c:0d:f7:0c:ea:dc:ba:1b:5b:a8:51:40:75:1c:
05:4f:72:60:13:b3:62:e5:7e:2f:7f:9c:b6:5e:5e:
fe:f1:a9:5b:50:72:dd:c3:3c:13:ee:d6:c1:4f:5c:
9d:75:2c:a3:24:c7:12:d7:b5:08:83:e9:62:1b:75:
ed:34:59:3e:3a:c5:09:4d:30:0c:fd:39:65:ab:83:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:D0:E6:9F:7E:AE:C7:EC:2F:40:AE:E5:A7:D0:87:C6:F0:5B:AD
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:9f:67:e0:52:6a:43:7a:01:5a:75:ff:36:16:70:b0:e2:
23:94:b1:86:8a:9f:33:c2:41:03:d4:fd:81:89:e1:5c:51:27:
68:db:9c:aa:db:4a:90:17:36:ff:77:35:6d:93:6b:7a:94:4c:
a8:0f:e9:2a:6e:a7:08:12:1b:fe:ae:c3:14:2c:20:06:bd:2f:
4b:77:4d:23:d9:a6:24:e7:25:9e:43:9e:47:32:b2:6a:87:41:
6c:57:62:60:94:5d:07:01:62:fe:4d:3c:41:3a:e1:15:f2:01:
99:e3:43:05:bf:96:a7:f2:13:92:8f:a8:9a:8c:53:2f:2a:62:
4f:c8:15:0b:8d:e6:68:5b:51:a4:d3:99:09:57:ec:19:58:79:
af:cf:17:74:3f:a7:fc:c7:8d:1d:c2:f9:40:5f:48:2d:ba:83:
04:c9:96:2f:69:0c:d3:49:26:7f:94:40:01:7f:7c:18:28:00:
ca:85:05:6e:f7:3b:d2:bd:d3:36:04:15:76:8d:fe:9a:86:66:
d6:83:29:a1:6c:05:ae:37:12:fc:6f:fc:11:41:48:b4:4c:c8:
d5:d2:ed:18:00:93:a4:5e:e4:57:85:2d:d0:8b:58:c9:6f:33:
6d:19:62:34:28:a7:3a:ca:b1:af:3d:a8:f9:5c:43:07:70:ba:
27:7a:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:09 2025 by rpki-client