Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: ltIqmSIOPre/jSihjsJ4VYEE1BW1Z9rFRgVSNj/coY0=
Subject key identifier: 4C:78:F0:69:F0:37:DD:BE:41:78:3A:4D:4E:6C:73:52:40:1C:08:DC
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 0197B745BBF785CB88C800F477D9CF0DB067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 0987
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: 562RUrp1BQP9G0OAAr0eehQlc8jpE9yyCTcnabcf9ls=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bb:f7:85:cb:88:c8:00:f4:77:d9:cf:0d:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=4c78f069f037ddbe41783a4d4e6c7352401c08dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:a9:da:22:21:bd:42:39:9b:c6:3b:a0:cb:
58:69:d4:2a:24:08:67:44:df:20:d6:38:d2:5f:58:
c2:a0:b5:ba:7e:01:c3:87:61:b3:b1:9e:c1:34:a1:
2f:60:50:8b:57:c9:d9:0c:8e:31:1e:3f:b8:58:08:
62:89:2f:bc:6f:21:07:48:e4:79:94:c0:4d:f2:94:
d5:d7:cd:b4:d1:ad:fa:86:d0:2c:d8:bd:f7:6c:2e:
a6:c0:d0:ab:6c:a5:92:dd:21:6f:30:9c:f4:1d:5e:
8d:37:94:ed:22:d4:13:1f:69:ae:22:76:9b:1d:8e:
c3:f2:6c:c5:58:42:36:55:b3:a7:81:65:a0:62:92:
62:e2:b1:10:96:df:b9:d6:37:f2:b2:00:ac:9a:b6:
4d:70:1e:83:7a:9a:00:1b:05:43:4c:84:84:43:96:
99:a5:d4:2b:e5:46:86:4f:a3:fa:56:0d:5c:b6:84:
01:0d:ec:31:24:f5:bc:89:50:63:c6:6a:22:eb:fc:
07:ce:38:2d:90:fa:96:3f:57:7b:51:bf:f4:c3:63:
b0:5c:cd:56:1f:66:4a:ec:21:9a:9e:dd:89:05:02:
e8:c2:ed:bf:c5:49:58:26:c0:b5:35:a9:ce:fa:19:
80:92:11:8d:48:28:f0:06:3c:54:84:ea:e5:bc:05:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:F0:69:F0:37:DD:BE:41:78:3A:4D:4E:6C:73:52:40:1C:08:DC
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:97:ef:d3:96:b1:63:53:98:64:13:61:8c:3b:39:36:28:e8:
3d:28:7b:aa:19:9a:ef:28:91:b6:6b:cd:46:43:72:22:c6:7a:
04:0a:1c:7c:42:da:8e:83:93:01:63:5c:4e:ac:d6:64:0f:13:
d9:68:10:47:b5:85:f1:fb:8b:3c:6a:a7:6b:15:59:db:bc:be:
de:35:35:1a:47:a3:e2:9a:03:ba:66:5a:81:25:0a:fd:7d:42:
84:0e:f6:d8:99:17:81:ec:fd:16:b6:89:27:26:ed:06:8b:54:
c3:0f:e2:3c:9d:eb:13:7a:60:20:44:3b:72:7c:6a:63:40:f1:
1e:5c:73:3d:c8:30:ba:08:09:11:b4:93:0c:e9:39:72:fa:3d:
c8:73:d6:82:f6:df:72:a7:e8:33:6f:57:2d:bf:eb:fd:a1:28:
7a:cd:29:b8:a5:d9:a1:7c:b1:10:0f:6c:10:91:16:35:b0:83:
d5:f5:f0:9d:c3:da:6e:83:c1:e7:23:28:c2:87:8e:0e:91:8a:
24:46:14:31:19:fb:58:b6:0c:20:af:14:84:81:0c:76:1a:75:
f9:49:67:ce:26:81:c9:ff:60:a9:18:28:ce:04:99:07:c1:f1:
0e:77:a5:77:5f:10:e1:24:f6:62:88:f6:d1:78:1f:31:d3:ee:
73:ca:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:37 2025 by rpki-client