Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: W3eBYr/LMU66cLPzjs9CoEUFj4zHgzisjt65RdcmluU=
Subject key identifier: D2:AA:AF:FA:35:16:7A:10:7D:E2:70:75:1B:47:22:DD:16:7F:A4:0C
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0197B745908744FBA20E1836AE3A8DE8EDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 08CF
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: dyk9pNaRlAp8WyjDcvzZco4oN9GME2CC3ulA/GkrBJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:90:87:44:fb:a2:0e:18:36:ae:3a:8d:e8:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=d2aaaffa35167a107de270751b4722dd167fa40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:6d:af:1c:64:64:e4:10:d9:8e:13:08:6f:
9d:3d:ea:d4:70:67:aa:3d:60:2e:f9:86:29:ad:be:
8a:be:48:ce:33:56:07:7f:ce:8e:9d:e0:ba:2d:2c:
69:4a:d6:7b:0e:80:39:76:a8:23:07:11:d1:d8:d1:
30:c9:e4:ca:d0:38:a1:dc:4f:fa:d6:21:14:1f:19:
1e:35:e1:8d:bd:e8:a0:0a:ae:e2:4c:35:30:7b:6d:
2d:16:fe:c7:79:e0:cb:a9:84:a0:ed:d3:23:64:da:
b1:f7:94:63:23:ce:9f:2a:72:ea:39:50:0d:29:dc:
01:7b:ec:35:86:b0:71:0b:88:fd:15:8b:bc:53:a5:
82:38:61:8f:99:e4:24:7d:11:f6:07:8e:0f:e6:27:
16:fb:49:50:7e:b5:2d:83:a7:fe:87:80:78:ef:3b:
4d:2f:39:5a:95:af:21:46:85:59:8e:98:78:46:62:
8d:ed:15:62:c2:ea:30:85:a6:43:a1:cd:f0:64:37:
a8:d5:40:79:cc:0d:d0:2d:4a:f5:77:27:fe:8b:5e:
b4:a9:da:77:bd:f7:05:2a:a2:4a:5c:39:97:43:54:
3a:93:19:bd:6f:ee:39:bb:04:40:72:8e:23:b3:d1:
07:b8:66:14:b4:bf:c9:db:96:a9:d0:47:6b:ed:ac:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:AF:FA:35:16:7A:10:7D:E2:70:75:1B:47:22:DD:16:7F:A4:0C
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:5b:2d:4e:a4:32:66:45:c5:5f:64:55:c4:1a:32:5b:90:
c9:c2:8b:dd:a6:f7:2f:ee:0f:e1:12:29:5c:df:14:be:8c:3c:
18:38:1b:8a:5f:b3:a2:27:e9:1f:87:09:48:69:02:57:d4:67:
6c:f3:9d:4e:bd:97:f2:4d:17:c7:68:09:d4:8d:7e:25:8c:7a:
71:2e:21:7e:34:43:37:49:00:89:c8:c1:42:75:0c:83:75:f2:
5d:70:6e:8d:04:91:db:1f:a5:e5:b5:45:b6:c3:3c:55:53:a1:
f9:d9:d0:02:09:db:28:53:2f:cb:3a:d2:66:01:7e:f6:75:b5:
75:2f:38:e0:b6:47:05:0c:03:fe:2e:ed:6b:79:90:fd:d5:c4:
29:06:78:95:5f:37:51:9d:7a:fb:4e:83:27:14:c9:52:a0:a4:
3f:09:41:4f:de:35:44:b8:a2:d1:ea:6a:f4:6a:38:91:dc:2d:
d6:b0:8f:5b:14:fe:65:3a:a0:3f:9b:f7:0b:47:78:fe:94:4a:
8d:3c:62:21:28:fc:a6:2d:36:50:7a:21:cb:16:46:d7:f1:6b:
f0:00:40:ee:54:25:cf:a8:e4:36:58:96:c0:4d:f4:dc:2a:dd:
ab:0d:87:1c:92:b2:c9:f0:ab:58:b2:47:31:7e:6b:09:ba:99:
9f:49:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:22 2025 by rpki-client