Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: TG5mK+I6Sn+GVu5y/RieL6Py7XQ1pI5qzA9aA4D1Px8=
Subject key identifier: FA:C0:83:CE:7D:DB:0A:B8:78:A4:ED:F7:67:34:E7:15:73:0E:CB:F0
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0197C6EF7675361399540E33ECDF6B39F7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 17:01:11 +0000
Manifest this update: Tue 01 Jul 2025 17:01:11 +0000
Manifest next update: Wed 02 Jul 2025 17:01:11 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: d3dGwoLipCftHTccvpZRFVVezZS8Y5zgOBxqLfRDrEM=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:76:75:36:13:99:54:0e:33:ec:df:6b:39:f7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jul 1 17:01:11 2025 GMT
Not After : Jul 2 17:01:11 2025 GMT
Subject: CN=fac083ce7ddb0ab878a4edf76734e715730ecbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:15:10:44:91:f7:ed:60:ce:bf:b3:3b:ab:
04:b8:da:e2:a0:98:fc:7a:21:13:66:10:1e:83:d0:
40:d7:9d:9a:c2:ad:9b:90:98:33:d7:2b:82:e9:a7:
7d:b0:24:6a:e5:25:58:f4:f7:17:a3:f6:d8:68:1c:
e9:b6:89:65:68:f6:4b:66:47:21:35:c4:a7:0f:2c:
d0:b9:b3:c7:cb:51:6b:00:b4:3c:af:11:d3:22:e4:
e8:c5:41:ad:11:56:b7:13:9d:02:e3:81:c3:86:1c:
b9:a6:99:ca:f0:54:0d:79:82:30:b9:24:00:c4:fb:
91:7b:da:9f:15:00:6c:bd:f6:d1:9f:d8:50:6e:b2:
47:79:92:7b:3b:37:71:fe:2a:ce:99:39:c5:d6:4a:
04:ba:b6:a5:66:2d:cf:36:d7:0b:1f:2d:bd:f9:41:
ed:a2:8f:39:ba:33:96:fd:8d:21:d7:ee:8e:42:ed:
2d:3a:a5:ca:6a:3d:09:a4:14:7d:62:18:0c:8a:9d:
63:59:12:96:4a:85:88:66:69:83:53:70:d3:33:55:
0d:fd:ae:6a:90:e7:34:cc:97:16:e8:30:87:8b:ad:
01:fc:90:db:0d:2b:40:64:9e:0c:a5:e5:f4:48:ef:
ed:84:64:b7:c6:32:b6:33:7b:01:e2:c9:05:57:c7:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:83:CE:7D:DB:0A:B8:78:A4:ED:F7:67:34:E7:15:73:0E:CB:F0
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:e5:0f:bd:dc:77:b6:84:52:b6:51:2b:51:4c:d9:ac:29:
fb:4d:ac:26:4d:b1:d0:5a:b3:7b:6f:07:b6:db:97:dc:2f:37:
fb:f1:a0:d4:d2:7a:0c:57:22:12:98:d9:77:26:7e:1d:b8:58:
87:90:f7:9a:1c:ab:d0:6c:e5:8c:35:ea:8d:c8:47:64:0b:ee:
6a:fd:89:f9:e2:81:14:ce:d1:71:f1:04:2f:c0:09:8d:5f:88:
9d:2e:f8:36:8f:6f:d0:ac:b3:80:e1:14:62:8f:a3:57:51:20:
7d:1b:7d:d3:44:c5:62:a1:6e:2c:8e:ef:d8:d2:43:05:89:8e:
b7:34:eb:53:f5:01:50:80:e3:6a:c0:fa:2d:bd:11:92:26:db:
8b:2f:b5:2f:1b:3a:d5:17:a2:3f:e9:e0:8a:1f:ab:c1:9a:69:
b1:8a:e7:5a:ff:c2:32:ff:3e:44:fe:69:62:03:b0:57:48:a5:
24:24:37:91:a8:34:54:c1:fe:30:ec:ba:54:d6:c7:fe:04:07:
15:71:b9:17:52:c7:71:07:22:ad:ea:2b:9e:b5:19:2f:ec:a5:
2e:0d:31:1d:00:b3:ce:83:1f:08:a2:0e:5d:3f:a5:96:76:a6:
d1:93:bd:70:8c:28:cc:5c:ae:62:59:41:c2:db:40:ca:34:36:
9a:f3:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:27:36 2025 by rpki-client