Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: xVsZaIAXHjJ2ZaXq9eW2to2g/FvwOUDtJrx3kelJzlo=
Subject key identifier: 37:C4:27:77:53:97:07:3D:C5:2A:FB:09:0E:F9:EB:0B:AE:DC:30:83
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 0197B70ED1B0544FA52171B0C3545859363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: kRGywLU4eHBcnWg/dDr3TRIaHBFhLHJxIOmlCi1Mwi8=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d1:b0:54:4f:a5:21:71:b0:c3:54:58:59:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=37c427775397073dc52afb090ef9eb0baedc3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:16:1a:39:14:82:5a:c6:04:3d:24:50:4c:
de:cb:20:d9:35:5c:63:0c:2a:c8:2d:14:98:4c:7d:
34:83:b1:7b:86:2b:ed:10:5b:5d:07:69:08:70:3c:
cc:53:3c:d0:43:c6:6c:09:08:10:98:5a:82:db:73:
b1:b9:83:b2:20:5a:16:da:b4:3f:08:fb:1d:4b:5e:
f5:f6:75:a6:10:6c:21:8c:b9:f9:a8:26:67:d1:b4:
fa:d8:76:2d:f3:7d:7d:a6:a3:7f:49:4c:2f:57:eb:
1f:ae:05:b5:d6:72:f3:73:09:80:1d:19:9a:6a:80:
05:38:22:c5:f4:4e:cf:9a:2f:fe:5d:ec:27:97:29:
5d:a5:66:47:a5:99:2d:a0:02:a6:ee:1a:46:da:6d:
30:42:e8:84:c5:b2:ae:e9:54:34:37:dd:37:8e:b4:
fd:04:10:6f:ec:04:c0:f9:26:93:7e:cc:02:de:7c:
da:0c:61:4f:15:8a:ec:8b:16:6d:a9:b7:0e:b8:ba:
df:e0:25:04:db:a2:e1:9c:fd:61:df:df:3b:5b:e6:
80:96:1d:82:4d:c1:95:11:eb:80:fc:d8:2d:66:d5:
8c:97:d5:bd:fb:88:4c:48:93:5f:50:8e:04:40:ca:
ad:7e:60:74:bf:b7:eb:8f:26:e6:53:97:d7:b3:0d:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:27:77:53:97:07:3D:C5:2A:FB:09:0E:F9:EB:0B:AE:DC:30:83
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:53:dc:c7:66:a5:c3:0a:e2:88:83:98:2b:2a:58:40:db:ea:
85:56:6c:da:4a:95:cf:46:33:bd:ac:b9:bd:cb:06:b2:79:e6:
48:eb:15:ff:20:2c:8e:b3:6b:29:2e:b2:ca:60:f5:ea:84:77:
cc:f1:f8:a8:bc:73:bf:02:6f:c5:cc:79:b0:05:67:ee:4c:04:
d2:29:33:b5:a4:7b:16:59:d5:21:59:f1:d7:b1:98:d2:3a:3d:
df:3c:6e:e2:63:78:ae:cc:ed:c3:61:65:f6:db:91:d0:a3:4b:
fa:8b:3d:ef:3d:b9:15:40:75:35:2f:ce:ba:5b:bd:91:25:06:
94:ab:50:a7:71:72:19:c6:6a:6e:c3:8a:b4:71:65:ab:8e:0f:
2a:d8:ee:6c:9c:f5:a7:f7:cc:32:b4:10:19:c7:a9:cd:bc:c6:
54:1e:82:06:e5:c0:79:9d:1f:20:49:78:dd:e9:9f:08:6a:61:
82:6c:20:79:78:91:a1:ce:b8:13:ef:01:ab:2d:7f:40:37:14:
4c:c8:52:1f:ae:bb:d1:55:60:ce:72:2a:d9:94:38:47:fe:04:
b5:92:0d:5e:cb:b6:ef:c0:f7:cd:6a:62:59:11:26:ea:af:07:
65:d6:42:48:7a:fc:98:83:35:1d:f5:1a:0a:c5:65:d4:6d:4b:
80:ad:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:18 2025 by rpki-client