Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: JJlwfAcyTG/Xw+xpIb1XNs+lKtKwzKPGLRme9n8IEAk=
Subject key identifier: 4E:AE:98:D2:AF:E9:AB:AE:94:C4:78:A7:C7:89:ED:74:33:11:C3:51
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 0197B70E9F15D94571B80F64DE753265200F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0CEC
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: sVDIqyTO9C/+2mqW6vcarpwqFT87foeFD+nLy9vRSTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:15:d9:45:71:b8:0f:64:de:75:32:65:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=4eae98d2afe9abae94c478a7c789ed743311c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:e0:37:1b:5a:88:52:bf:0e:5a:15:84:6c:
f7:38:23:40:ec:f3:cf:d2:2e:70:54:83:0a:ec:37:
e4:dd:a8:bb:72:f3:2e:71:80:64:9e:9d:40:28:1e:
09:d1:c1:cb:64:31:bc:ad:f9:06:5a:f8:5a:9b:b8:
4d:f7:aa:1a:b9:65:5d:87:59:ec:f4:d6:c0:55:15:
f6:70:4c:d7:84:8b:e2:bc:39:e1:0b:ce:f1:62:89:
6a:8a:aa:46:19:9c:42:cb:51:5b:5f:fb:84:0b:2c:
42:f4:bb:b1:d2:8e:70:36:0b:56:34:84:88:b1:69:
f0:5f:07:b9:96:77:1f:14:ad:3d:be:26:64:86:b0:
38:de:0f:9a:61:2f:c4:66:3f:44:ac:db:08:96:14:
4a:ca:5b:21:a5:8b:a0:6f:9a:8e:be:d9:9e:0b:c6:
c5:6c:b8:46:7f:e1:af:d8:87:25:77:b0:ba:d9:d5:
db:98:84:44:1c:8d:f8:71:fa:36:9d:75:ce:f1:57:
a2:51:1e:b1:8a:c4:71:49:9a:2c:42:c4:c8:47:6f:
a1:ba:70:8b:b2:ac:03:05:b8:ca:a3:79:a9:67:0a:
ba:71:a9:3d:a0:6d:e6:c5:0b:ba:b0:58:14:f9:33:
ed:17:11:92:18:4c:80:68:b1:6f:bd:d6:13:62:2a:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:98:D2:AF:E9:AB:AE:94:C4:78:A7:C7:89:ED:74:33:11:C3:51
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:9a:38:b3:06:3e:37:c6:a7:40:b4:10:01:8f:c8:92:f9:
54:d7:03:84:8b:1e:a5:90:44:88:65:7e:a4:f8:c9:a0:88:ea:
71:57:a2:47:41:ba:0a:9d:b0:26:66:22:07:d2:23:f6:0f:30:
58:8f:f1:91:a9:0e:3d:1d:23:2a:f9:e6:0e:da:a9:de:aa:03:
94:6c:02:b0:f6:d5:ea:b8:d0:62:7d:cb:59:16:b0:12:50:ef:
58:44:b2:cf:75:94:e9:46:bc:ec:ab:da:ea:55:ad:6d:db:39:
5e:82:b1:4d:db:10:4b:aa:01:f0:e1:7f:8a:d2:76:92:6d:40:
42:89:de:78:6f:8c:48:d6:0e:ad:f8:06:a5:36:26:4b:a5:db:
2a:71:20:0a:3e:66:3e:12:12:db:52:64:96:7a:e5:26:e3:79:
cd:b0:92:1c:3f:1c:b7:e0:91:09:f0:50:d0:ab:18:bd:89:f6:
2b:ed:2a:a5:d0:5f:7d:41:7e:05:62:8f:aa:d5:00:1f:a5:7c:
57:46:d3:1f:4f:49:93:bf:e2:e7:9e:f4:47:f3:de:a1:28:7a:
ce:0f:ab:1e:20:a0:81:04:ac:ea:6c:51:49:02:1f:8a:ee:a7:
f6:b4:ff:40:57:ed:27:4f:dc:f2:84:0c:76:e5:ab:2c:ca:dc:
a9:3b:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:58 2025 by rpki-client