Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: BlPXNRvvxB0b0ymOUZw5tMrM3vLxKXNovkFSlEzKFSI=
Subject key identifier: 60:74:BA:17:94:A4:3A:C6:DB:89:B5:3B:4C:91:7A:D0:55:3C:21:0B
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 0197B9A1B5BE735A24DCF236EDCF4BF1D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 03:01:11 +0000
Manifest this update: Sun 29 Jun 2025 03:01:11 +0000
Manifest next update: Mon 30 Jun 2025 03:01:11 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: GIpJUhi4GKoFe7XB6ZZ5cOUOfLOyuBYoG3Jr1esOAzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b5:be:73:5a:24:dc:f2:36:ed:cf:4b:f1:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Jun 29 03:01:11 2025 GMT
Not After : Jun 30 03:01:11 2025 GMT
Subject: CN=6074ba1794a43ac6db89b53b4c917ad0553c210b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:b5:1c:47:13:93:9c:b8:e3:7e:b0:2c:17:
46:9d:c8:ac:83:f5:d9:98:50:28:9d:39:21:72:1b:
a1:f2:95:b7:a5:51:5c:06:d8:39:98:40:0a:9e:54:
0c:2c:84:25:64:38:44:0f:a5:b4:63:54:a0:63:3c:
6a:9e:66:df:11:0b:dc:0d:79:02:df:d9:cd:9c:59:
93:05:8e:f2:20:0a:45:35:ad:aa:df:f1:e6:cb:3e:
30:ae:9a:f3:0d:c8:2e:9f:42:44:ac:a8:02:72:f7:
75:d7:d4:ba:e0:9f:b0:36:60:4f:e1:3b:30:20:16:
db:53:77:d5:03:5d:cb:0c:83:b4:bc:8a:58:84:37:
87:48:17:a3:80:de:ee:16:91:83:56:11:28:6e:90:
85:31:33:c7:a8:fe:a8:f1:10:23:16:82:f7:0d:1f:
1a:58:3a:a7:75:50:25:76:a8:23:46:fa:0c:cd:0d:
da:50:5e:ae:87:26:46:85:6d:c7:29:3e:cb:31:0b:
9e:0c:09:64:66:2a:07:db:8f:76:5c:3e:a4:2e:bb:
39:e2:fe:47:7d:5a:aa:8d:b2:15:40:52:72:2a:d5:
c9:f4:3a:23:d0:be:c9:e9:50:f4:52:58:62:98:75:
32:79:c8:03:e0:22:8d:d6:a4:51:64:1b:91:5f:fb:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:BA:17:94:A4:3A:C6:DB:89:B5:3B:4C:91:7A:D0:55:3C:21:0B
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d9:66:3d:fa:c6:a0:fd:95:dc:1b:f8:11:27:81:41:4b:b8:
94:a1:de:28:ed:c3:97:4f:85:c7:da:a5:e4:ce:2f:6c:43:21:
89:35:82:72:1c:90:72:aa:13:13:02:93:79:c9:e5:0d:cf:05:
40:ae:75:ec:57:da:41:23:c6:4b:bd:35:87:be:d8:2b:ab:47:
5a:dd:8e:af:84:02:9b:16:63:b7:26:51:bf:ac:4d:45:a5:dd:
8c:bf:8a:d9:29:c5:7b:11:c2:67:53:fd:97:33:69:bd:e0:e1:
be:6e:1b:14:f8:4d:89:e2:f1:cb:9f:7f:16:ad:11:23:11:1e:
25:d3:b5:aa:f6:35:65:99:f6:e8:cd:8d:5f:b1:d8:00:d4:7c:
ac:70:13:cd:e7:42:0b:6c:ef:1c:bb:e0:a0:dd:96:a4:8e:07:
4f:b8:08:ec:b9:31:9a:97:c2:ca:b7:82:46:03:df:8b:07:12:
ab:c3:f7:e5:06:39:f3:1a:be:2a:d5:de:e7:20:59:d2:50:04:
cf:6f:22:da:81:55:61:d8:28:96:ec:e4:c5:29:40:d4:1b:69:
7e:b7:bb:69:0e:ad:cb:a1:95:95:f2:01:09:e3:89:03:5b:55:
d8:dc:64:05:3f:92:6c:b5:55:9e:b5:a5:27:85:ae:40:46:d1:
53:00:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:20:03 2025 by rpki-client