Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: mTnwbrWw+xjZ578pvsLzPsKa9FbdT/69R81JP6MMynA=
Subject key identifier: B1:0D:5B:37:13:A9:29:BC:43:78:7F:66:7F:40:2C:A9:34:1D:D1:86
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 0197B5C4E9C428B16972822DC0982E718B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0F
Signing time: Sat 28 Jun 2025 09:01:10 +0000
Manifest this update: Sat 28 Jun 2025 09:01:10 +0000
Manifest next update: Sun 29 Jun 2025 09:01:10 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: MHpVPy5hiE6XjPugZogYCqxxrzbK0NWLENhNXy24OL0=)
2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e9:c4:28:b1:69:72:82:2d:c0:98:2e:71:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Jun 28 09:01:10 2025 GMT
Not After : Jun 29 09:01:10 2025 GMT
Subject: CN=b10d5b3713a929bc43787f667f402ca9341dd186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:8c:bc:12:bf:19:d0:0c:b4:98:42:bb:b2:
2c:1b:5c:76:ad:4c:d0:37:37:1b:8e:9b:d2:7a:2c:
3d:c0:ed:35:5a:f3:09:42:5c:29:05:3c:e9:12:d7:
53:a9:79:d9:8f:a3:f5:0e:31:11:12:76:de:2f:52:
4b:19:39:67:b8:38:b4:36:23:2f:34:b8:8b:6e:e9:
72:ad:2f:f0:43:03:75:fe:e8:3b:5f:7b:79:ea:4d:
58:ed:28:55:41:b0:25:2b:be:14:80:35:08:09:db:
d3:ae:1d:d3:50:81:48:aa:9a:fd:f1:01:6e:e1:ec:
4e:2b:43:dd:22:7b:66:35:0b:d0:d5:54:c4:d0:69:
6a:f9:ec:27:60:89:ad:19:46:50:68:82:34:64:7e:
dd:dc:5e:33:f7:9c:fb:f0:15:e2:e0:e2:a3:5f:c0:
b0:f8:07:37:26:96:90:1b:39:7a:56:ec:fd:26:84:
d5:b5:a1:27:45:3f:ee:d1:c7:54:1f:10:b8:36:91:
97:f9:a9:5d:c0:24:cd:24:9e:3e:80:7f:1c:4a:77:
7d:2c:ac:cb:8f:b0:ae:d2:71:0b:ce:b7:8b:e3:eb:
34:9f:ed:b7:46:8a:fb:79:6c:5a:fd:96:a3:eb:33:
a9:43:9b:bb:01:c9:f0:08:7f:67:68:b5:7a:86:0a:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:5B:37:13:A9:29:BC:43:78:7F:66:7F:40:2C:A9:34:1D:D1:86
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0d:b9:43:07:35:fc:06:7e:a9:56:52:9f:38:1f:e0:2f:d4:
0e:0d:7e:00:5f:23:30:27:e3:46:f4:34:ab:2b:d9:8e:63:5e:
14:ea:b7:4e:dd:29:03:ec:b9:16:1e:3f:7f:09:ac:40:a1:cb:
ac:b3:4e:d2:a0:1d:c7:2f:b7:b4:1a:d7:01:19:71:8a:b1:2b:
7e:d2:67:53:03:94:27:a5:a2:bf:f6:ba:45:1c:82:7c:b3:d2:
4a:ca:95:a3:a5:50:56:fa:06:15:65:fe:f5:26:6b:f2:0c:8e:
ad:36:91:41:a2:c9:b5:77:0e:52:de:66:0f:45:51:3d:d9:c3:
10:02:94:47:f5:8b:0f:10:6c:84:c3:23:73:95:60:bd:4a:9b:
5e:b1:89:9f:9e:b9:a4:e1:5a:f6:65:60:e0:74:07:e7:1b:eb:
50:b5:86:29:22:fc:dd:cc:15:ca:b6:b3:4c:ad:c6:95:38:58:
85:df:e5:ec:83:a0:eb:8a:c0:ac:23:e9:68:43:a5:22:a7:83:
b5:c7:07:5d:07:84:7a:09:bd:1e:5a:d3:0a:65:94:0d:ea:85:
1d:33:5c:9b:a4:a2:53:10:43:25:25:8d:1c:a7:70:47:17:6e:
75:7b:5e:81:90:22:98:6e:1b:45:e9:4c:2e:29:7d:ff:44:df:
fe:6c:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:10 2025 by rpki-client