Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: sexRkfvFj3lv4vP2i8R47KwqTJ+D1spm44etsojyKqw=
Subject key identifier: 59:A9:48:80:15:0D:7C:4C:D3:F2:89:41:0C:4A:1C:51:26:07:CB:90
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 0197B70E94601E12A5E3D4D643B58A8357F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: /jDGTvuaDXc0vniOhJsuWZT4qYkMHBS+vSEZqHKin38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:94:60:1e:12:a5:e3:d4:d6:43:b5:8a:83:57:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=59a94880150d7c4cd3f289410c4a1c512607cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:6b:e7:e8:a9:b7:e5:ac:2e:bf:0e:8c:68:
b1:ce:dc:60:a1:dc:92:2c:32:37:04:d5:91:fc:8a:
3d:b1:50:15:f6:ad:17:cc:99:d5:86:c1:f0:0a:48:
02:6d:5b:9f:5c:9c:bf:d8:67:db:19:21:1c:cd:8d:
d0:e1:8f:39:5e:7a:b1:c2:bf:19:06:ad:91:a8:c7:
02:e8:8c:51:bb:f1:81:62:6b:47:4f:e4:35:a2:ba:
00:27:de:f3:ce:3d:6d:6e:dc:78:62:3d:d6:21:64:
e2:83:08:bf:df:89:a2:c2:01:35:9b:57:a6:6d:bc:
79:fc:d1:05:47:e4:e3:f5:bb:19:8b:46:02:6b:a7:
57:c9:b6:4c:e3:63:0f:6a:46:5c:21:2b:fe:43:4a:
58:2f:69:fe:a8:c8:e2:f8:b3:bf:f3:0b:53:28:08:
c3:a3:b0:bf:be:8b:e4:a3:c0:56:85:f7:4a:9d:3f:
87:ea:94:e1:e7:22:bd:43:a0:63:3e:cf:55:38:7e:
a3:60:a8:7b:bf:76:55:6b:39:e3:c3:f9:07:33:61:
2f:e8:70:9f:77:e6:76:4e:a8:d3:bc:ff:60:d0:71:
f4:67:1e:68:c6:41:93:98:80:8f:49:e0:60:c0:36:
94:bf:90:f3:90:59:1b:cb:68:32:a7:65:46:a3:62:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:48:80:15:0D:7C:4C:D3:F2:89:41:0C:4A:1C:51:26:07:CB:90
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2b:b5:21:90:4a:a3:56:93:0a:ab:88:78:4a:a5:b2:ee:d9:
7b:94:e7:88:fa:1e:41:96:5b:7d:02:d2:3f:1d:23:f2:95:f8:
8f:e2:99:87:cd:51:6f:41:87:ef:7b:0e:53:8a:be:7d:f9:47:
ed:ed:04:9c:30:e2:ca:be:4c:fc:e6:4a:7b:14:61:1b:18:fa:
e9:7b:15:2f:f8:0d:a9:cf:f8:2e:a0:6d:f0:e0:73:be:00:3d:
10:e4:df:12:d3:19:24:27:b0:69:21:15:1d:5d:0b:da:53:5e:
81:22:2c:c8:dc:77:f8:52:24:39:c4:48:b6:eb:58:bd:2d:60:
bc:23:a8:d8:26:c1:4f:b7:b0:32:c0:bd:92:88:e4:e1:d2:ca:
8f:fa:98:5d:ff:24:36:ec:28:25:95:aa:96:f1:6b:98:18:03:
4e:a7:f7:d8:79:d4:6a:fb:ef:9c:79:e7:aa:21:2d:3f:ae:31:
d3:96:49:1a:dc:40:5b:7c:8c:62:8a:1f:a0:05:5e:44:49:1f:
a8:16:b4:0d:68:d2:1b:01:aa:b3:e2:1f:8d:c7:b9:dd:fd:20:
40:b8:55:6c:27:04:9f:c7:82:0e:80:26:d3:74:61:6b:2b:cd:
f2:4a:03:4a:2f:8f:b4:16:c2:11:ab:c1:98:25:ac:f2:2f:fb:
50:5a:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:15 2025 by rpki-client