Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: fRgnfBTR9AosC/d4JjWjBQI6iJbrdPUB1JAab4SNuKI=
Subject key identifier: BF:B7:FB:4B:03:3C:95:73:F7:9F:E7:09:CF:AD:01:CE:8B:66:0B:9F
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 0197CE3BC3BE6291E27998557753E7F3FD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 03:01:52 +0000
Manifest this update: Thu 03 Jul 2025 03:01:52 +0000
Manifest next update: Fri 04 Jul 2025 03:01:52 +0000
Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: +196GjYmpzU816wn3ifTIvkDRx37LkptekXZK0T0BgQ=)
4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:c3:be:62:91:e2:79:98:55:77:53:e7:f3:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jul 3 03:01:52 2025 GMT
Not After : Jul 4 03:01:52 2025 GMT
Subject: CN=bfb7fb4b033c9573f79fe709cfad01ce8b660b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:4a:9f:55:8c:4b:d9:88:fc:99:61:f5:32:
76:3c:53:37:a8:a4:7a:84:d1:6b:cc:15:85:2d:6e:
ae:d4:cd:2e:00:4f:0d:1f:54:bf:86:53:1c:ce:f5:
e8:25:93:29:f4:62:d9:50:4f:e4:1b:1a:23:4b:49:
ce:8a:ae:ab:b2:ad:78:21:da:bc:55:bc:23:8f:43:
d9:78:57:87:e9:41:66:0b:7c:7a:ec:36:ba:d0:12:
11:e6:cb:8c:ed:45:f6:a6:74:b6:1a:fa:58:a8:a2:
4a:8a:b3:0d:7c:7c:e4:7a:39:ee:8a:16:9f:d5:da:
05:0f:2a:e8:16:a1:5e:d6:c5:78:3c:43:28:19:bc:
e8:73:ec:e8:91:63:b5:6b:0b:f6:0b:31:73:6c:cf:
2c:7c:8d:61:d4:a2:20:fa:98:cc:fd:32:a2:ba:cd:
b0:02:0a:ad:dc:d8:be:fe:56:18:cb:85:cf:41:24:
a2:a7:62:db:99:c5:4d:60:bc:a3:89:7b:24:5c:5e:
61:88:c4:0c:71:93:b9:44:91:c3:8e:eb:cf:7b:ac:
eb:45:f5:d6:03:ce:49:bf:6d:be:43:2b:bf:4d:af:
bc:4d:05:c2:63:64:40:a3:da:61:70:80:55:31:c4:
bc:a9:5a:3d:71:8f:bb:69:85:9d:3f:34:dd:70:1c:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:FB:4B:03:3C:95:73:F7:9F:E7:09:CF:AD:01:CE:8B:66:0B:9F
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:45:27:41:c7:bf:ca:92:c6:de:9d:35:82:e7:a4:9d:e7:fe:
64:ef:d2:11:5a:73:ee:31:4c:3c:76:c9:03:bf:df:2d:3f:79:
7a:c1:d8:c2:8f:12:69:9d:0d:c9:35:bd:0c:e6:ae:67:14:d5:
87:56:2d:65:1f:89:97:5f:42:a0:37:e2:2c:54:1e:18:00:ab:
58:f5:8e:93:4b:f3:8f:6f:be:bd:6d:02:15:32:62:82:05:80:
7b:f9:f5:04:3f:13:1c:f0:b2:2c:fc:37:33:48:53:ea:5f:0d:
22:6b:04:eb:fd:b3:11:a6:f7:42:b8:67:65:09:ae:cd:39:e1:
dd:38:e7:64:69:06:eb:84:88:86:13:97:9e:36:f8:a9:c5:09:
8a:b0:bd:f2:77:a9:d5:de:b1:ea:46:8a:46:40:cd:cb:16:31:
ca:e5:6f:2e:0a:e9:f2:33:59:10:6d:15:38:60:07:ed:c3:ab:
bb:9d:a3:ea:89:01:11:7a:b0:be:c4:68:b3:4a:f7:2f:ca:b3:
10:e1:4d:ad:14:d8:48:d2:23:96:9e:74:f4:7c:08:83:57:db:
5f:61:2c:88:21:95:7a:99:15:71:8d:68:b2:10:4d:26:25:d2:
38:cf:84:b8:57:b3:e8:e2:9e:4e:ac:b8:f2:95:7f:ac:8b:66:
c3:55:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:47 2025 by rpki-client