Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: 9Yg+nU0LCsX6HdSWUAPqr6HaWzm1zkAjtIan8lvMQ0I=
Subject key identifier: 31:B1:9A:F9:B5:47:35:CC:3C:2D:66:EB:CF:43:40:A1:58:55:86:58
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0197B7B30069BFDD4ADC5C61B97FF8F89FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 068C
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: G8OuMSvLKSpsZPd2LsSmu3y8JIIddYRORp0c5JUQ+MY=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:00:69:bf:dd:4a:dc:5c:61:b9:7f:f8:f8:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=31b19af9b54735cc3c2d66ebcf4340a158558658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:cf:44:8f:80:11:da:bc:81:6f:b1:c4:6e:
75:be:11:9a:fd:cb:13:52:7c:60:ad:54:5a:b6:73:
c3:41:84:b5:d6:40:42:20:0f:e9:7c:9b:9f:09:9d:
bf:11:cd:54:76:ea:4e:72:d2:93:d9:db:b2:b7:27:
3b:45:eb:0b:1e:2a:2f:6b:44:30:ff:1b:6a:50:6e:
c5:8a:39:08:eb:ee:2b:c7:ab:f8:1b:68:2f:36:3f:
8d:fc:1f:ff:0b:49:60:b8:b9:42:2c:5c:ec:6b:d3:
2c:a1:6a:54:77:30:2f:2b:0e:5c:49:a7:3f:e2:20:
f7:7b:71:03:a5:56:53:d2:82:a1:e4:22:35:b5:49:
75:7b:c7:89:8a:c5:5e:2e:cb:65:67:c3:07:c3:15:
c9:7e:80:02:42:66:f4:7f:6d:07:df:6b:ce:6a:a1:
11:c5:e7:3f:8c:a1:c2:34:e6:3b:1c:29:79:06:72:
a0:c0:76:78:7d:cc:b0:7f:a2:c6:bc:68:34:61:22:
da:fd:60:a7:83:62:9d:49:2c:b2:94:0c:85:bc:42:
e8:21:db:4a:78:30:18:41:e3:97:32:b2:f1:ae:e5:
05:8d:5f:cc:a4:2b:a3:fd:be:6f:6e:ce:f4:bd:8f:
12:88:77:0d:52:a4:05:ac:4d:98:f9:93:35:7b:8a:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:9A:F9:B5:47:35:CC:3C:2D:66:EB:CF:43:40:A1:58:55:86:58
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:da:c0:71:61:3a:8e:11:69:41:c9:5b:9f:36:96:e8:38:
e3:41:3a:94:ba:11:2e:f2:5e:8f:3b:bc:de:25:f2:ba:61:0a:
32:62:2c:57:4a:d2:4b:33:dc:9b:33:14:c8:e8:12:2e:1c:61:
53:32:8d:08:04:81:22:bb:af:18:6e:6a:97:aa:e5:9c:a1:08:
47:9b:9b:0f:f9:e4:82:c6:1d:04:13:cb:76:20:96:8f:8e:59:
e6:53:b9:0f:d2:b3:a8:38:e2:5d:25:45:09:27:18:db:c1:55:
f4:ed:26:36:6b:ba:a7:90:1c:c4:22:fb:ba:1b:44:32:33:cb:
98:d8:fb:f1:10:a6:00:cf:85:f3:8c:fd:14:7f:4b:ff:36:dd:
dd:d3:69:58:eb:68:37:60:62:7a:c8:9f:2a:b8:b5:89:25:f1:
68:6e:c1:4e:1b:9f:6c:7e:99:8f:8a:a0:c9:0d:68:32:00:79:
fc:65:37:04:7b:be:07:ed:b2:40:c5:f6:fd:03:b7:b9:cf:da:
9e:bc:aa:d3:d7:e7:3c:ca:ce:23:a5:8b:bb:93:08:c8:34:f9:
87:2c:c6:3e:f1:53:98:cd:d0:73:83:c7:ec:66:95:ff:9a:ae:
75:4e:ed:00:1c:e3:83:01:df:3f:12:73:b8:a9:c9:80:f5:3e:
b9:82:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:53 2025 by rpki-client