Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: ZhrDU17Fb1c+YziML4DLTww0R9LJzFL2ykyd/MbY1Uc=
Subject key identifier: 7D:57:E5:31:B9:B4:68:C5:D2:3E:7B:7E:0E:1B:19:1C:8A:32:4B:43
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 0197B6A2455E7B32955AD3C4B6C9BF9B4F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 054D
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: Lt0r2RCnzAaWVNSbTfOnU4wie6t8YRvXjUgYWLo7++Q=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:45:5e:7b:32:95:5a:d3:c4:b6:c9:bf:9b:4f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=7d57e531b9b468c5d23e7b7e0e1b191c8a324b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:df:a6:b8:04:0b:e5:3c:b7:1e:8d:ae:0f:
6d:6a:79:7c:ba:6e:b9:3d:dc:2b:06:67:54:58:25:
e7:4f:bd:ff:db:ce:0f:20:e7:b4:20:32:06:9b:21:
9d:bb:a7:fb:39:92:59:68:dc:22:d4:4c:f7:de:5a:
ad:0a:94:8b:d9:fc:dc:05:2e:43:93:20:1b:dd:5c:
0f:eb:60:10:ee:02:0d:db:40:75:30:c8:49:4d:5a:
77:56:e5:4b:c3:56:8a:21:01:ae:52:a8:3a:19:f3:
1a:91:6b:b0:8c:5e:d0:a1:69:43:1c:35:5e:dc:14:
05:d0:90:14:2d:c3:70:94:dd:72:5e:45:2b:b2:d2:
7c:91:a2:1b:d8:5c:58:d8:4b:0b:45:e5:4e:8c:b5:
b2:aa:b6:fa:c5:6f:22:a5:38:e0:bc:6d:29:67:c6:
45:08:a1:c4:a9:ec:31:b4:70:f2:13:29:04:bf:a4:
5c:e5:6a:7a:f1:02:30:d8:e5:29:cb:8e:f4:51:a7:
06:ae:45:15:42:56:2e:3a:c2:83:53:b0:6c:fe:09:
15:e6:92:28:de:1d:d8:53:54:51:ad:8d:e8:2e:c3:
27:3f:96:6c:e5:20:66:60:66:bc:9f:d5:90:0a:78:
df:dd:a0:df:5f:af:ba:ad:ac:2e:d2:a3:82:36:eb:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:E5:31:B9:B4:68:C5:D2:3E:7B:7E:0E:1B:19:1C:8A:32:4B:43
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:52:8c:2a:16:b0:18:8b:bd:d5:ba:c8:00:15:7d:02:a7:
2d:06:eb:a7:98:a7:2e:e0:69:78:95:64:83:dc:ed:43:ce:8b:
c4:39:d0:ce:f4:f8:a8:77:94:ff:aa:df:ab:7f:30:11:57:9b:
7e:00:8c:95:74:a9:99:f7:e5:b4:9e:d6:49:3f:8e:ef:f4:57:
6c:a4:e9:50:ca:19:4c:99:5e:bf:18:18:e6:4e:4b:9f:0c:96:
27:10:e9:c8:3e:b1:14:ee:63:bb:41:df:d5:ee:a7:30:2d:f6:
06:4c:0a:87:74:50:2f:59:94:e2:fb:cb:2e:8a:6b:8c:54:c3:
bd:ab:24:07:c9:7d:72:b3:9c:9a:a3:5e:30:9c:9d:09:d2:48:
21:83:1d:bf:ee:d0:6f:8f:1f:c2:bb:3a:ac:75:9e:e8:a9:57:
36:7a:89:c5:04:bc:cb:1a:59:32:2c:64:d6:90:72:ce:c7:2a:
c2:d1:55:54:f5:08:b8:d2:ad:51:a7:01:1a:cc:40:5a:03:47:
6f:7a:c2:b8:69:a2:0c:f7:6e:cf:7f:35:69:0b:ca:3a:b9:74:
47:55:10:f9:ed:b4:c0:2f:3a:22:6b:59:3d:b8:be:ec:63:e9:
06:bf:82:05:e2:8f:99:ed:99:cf:2a:7b:bd:d2:1e:5c:e1:11:
8f:78:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client