Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: +3TfUWU4QLRlf8KG9NX6y0VRBbbSJArfTfcl3UrA4oQ=
Subject key identifier: 56:5C:0A:66:6B:40:CD:6A:00:59:B3:28:B0:B6:0A:C8:01:2B:E2:8E
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 0197B70ED5AB94BFCF62F99B119872EF6B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0C37
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: orHdZSv5eDiptPC/yqaDPMmtr9bgDdns2Vav6jEcmGQ=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d5:ab:94:bf:cf:62:f9:9b:11:98:72:ef:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=565c0a666b40cd6a0059b328b0b60ac8012be28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:46:78:9e:a9:8c:42:77:53:2b:8c:a7:01:
34:ee:c7:6d:c1:76:2e:26:ce:56:06:a7:da:c3:ac:
ab:50:bf:ac:74:49:4b:93:d5:a2:ae:84:3e:1a:32:
5c:3a:3d:54:8a:fc:9d:15:69:b6:bb:76:1c:c0:68:
e3:d4:d6:c0:c3:2a:5b:6d:e8:1b:e4:c2:67:fd:77:
84:dc:28:49:3c:9f:d8:68:9b:c1:da:9e:2b:33:65:
f3:6b:c3:b1:9f:26:79:c4:1e:8b:72:78:1c:bd:5d:
f3:27:2b:0a:76:ac:5a:93:1e:9c:64:be:6f:95:3f:
c2:44:58:31:09:eb:58:72:cc:b2:88:33:55:c9:99:
cc:bc:22:42:72:0f:42:45:33:29:cf:e4:1b:64:03:
e3:89:12:f0:9d:fe:b7:87:29:af:e6:6f:5b:cc:61:
63:6d:4b:79:b8:a8:66:4f:18:30:6b:b0:2e:47:09:
28:2c:50:11:b5:ec:a2:52:2d:3f:79:64:c5:1b:3f:
f9:0e:28:66:97:71:a4:23:26:f6:b3:d3:84:de:cd:
c3:ba:26:b2:a9:ae:5f:8f:39:62:f6:04:fd:30:de:
19:a8:44:80:0f:ed:a9:c3:b2:4b:ad:1e:6f:46:b8:
a9:46:2f:35:63:31:ec:23:c2:89:16:5a:da:fe:e4:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:0A:66:6B:40:CD:6A:00:59:B3:28:B0:B6:0A:C8:01:2B:E2:8E
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1a:5e:9a:84:92:67:8b:18:e8:19:96:99:da:00:5e:db:c6:
74:45:8a:43:8a:05:be:56:09:ae:77:e1:f1:1b:1a:36:d8:3f:
8a:cd:b9:ac:9e:54:09:40:ab:85:a7:8e:ae:9c:80:cf:45:99:
de:1e:24:18:08:ab:5a:5a:f0:54:f4:24:1a:2f:40:19:50:47:
ae:a4:b2:59:e6:19:08:05:93:60:1a:b1:ad:b4:a4:26:5e:b3:
d1:ad:24:ac:5a:59:d0:04:47:07:53:d1:32:40:75:80:1f:9a:
e2:15:6a:4b:b8:6a:3f:f5:f3:96:bd:29:9f:45:e7:b6:f2:17:
96:4c:8c:32:49:c0:f8:4c:c8:96:69:55:04:e6:c8:5e:2b:c4:
5e:56:d7:a5:a5:13:ab:c7:c8:b0:1d:1f:2f:83:14:7a:3e:a9:
5f:70:5b:fe:de:0b:2d:a5:88:c3:b6:9e:3c:2d:a2:d5:74:bc:
76:35:e8:37:69:d5:1c:e8:23:fc:92:4c:1e:39:04:03:dd:7b:
2e:58:73:8b:1b:24:4d:4d:64:b9:8f:fd:0c:81:f9:f2:b1:e5:
8c:7f:9c:fa:f7:fc:f7:59:bb:c9:16:96:ac:65:74:47:5f:38:
2d:9f:56:c7:86:3b:33:9c:8e:2b:c3:af:0c:01:88:3c:e3:c5:
23:4e:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:28 2025 by rpki-client