Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: 1S2ne94hNQ8Jo+pGFRnK2989QzZi8szwIHi1I4lSKRI=
Subject key identifier: F9:6D:15:C4:DB:F7:C0:B2:83:BB:97:42:7B:F4:05:48:63:5B:11:11
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 0197B9D8AFFA11811F44D474F9EBCF18019C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1145
Signing time: Sun 29 Jun 2025 04:01:14 +0000
Manifest this update: Sun 29 Jun 2025 04:01:14 +0000
Manifest next update: Mon 30 Jun 2025 04:01:14 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: tYcFb66nZsSUOrybIw5wOyB2+b0Jx0NW+we3qHtlXk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:af:fa:11:81:1f:44:d4:74:f9:eb:cf:18:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jun 29 04:01:14 2025 GMT
Not After : Jun 30 04:01:14 2025 GMT
Subject: CN=f96d15c4dbf7c0b283bb97427bf40548635b1111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:03:24:30:9f:1c:55:da:88:2d:82:23:83:
b1:75:32:dd:b1:0f:66:3d:b0:52:f1:d9:9f:b4:ab:
3a:e0:dc:f1:00:80:58:d1:66:5a:25:eb:0e:1d:60:
8f:8b:dd:b4:d5:b8:ca:f3:68:4c:26:f5:78:e6:1a:
06:aa:0f:ac:d6:ae:7a:b0:9f:01:b5:4e:7c:a2:16:
d2:9b:af:1e:89:47:05:fa:6e:46:32:0f:46:9e:94:
e8:d1:25:f3:c4:8d:7b:31:ad:0a:35:eb:34:eb:75:
7a:e1:eb:9d:28:d8:0b:90:45:d2:89:42:ef:a2:ea:
30:a2:c6:24:33:12:c5:9e:81:b2:cf:97:2a:9f:a9:
19:a1:17:a6:d1:ae:91:4d:6c:1a:5c:df:53:e9:af:
71:ea:fa:26:ad:92:d0:f2:72:20:6b:bc:ad:29:38:
66:77:4c:e5:17:4c:f3:11:54:a7:00:48:d1:89:21:
f6:d5:e3:a3:30:e7:24:df:71:76:a0:85:a1:77:ed:
d7:8a:42:81:6c:8c:cb:6f:69:62:36:ba:7c:7d:26:
57:2f:6c:66:0b:d4:ce:5d:2e:4a:17:77:e2:56:fc:
fd:69:ea:8d:24:49:20:5e:08:61:aa:28:66:54:9c:
aa:4b:87:78:bd:86:15:3a:e1:eb:8a:12:80:f4:75:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:15:C4:DB:F7:C0:B2:83:BB:97:42:7B:F4:05:48:63:5B:11:11
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:2d:7f:c8:14:ea:90:d5:9f:f2:0c:43:5e:b8:f1:9c:6d:
9b:66:ae:3f:37:72:2f:2b:ce:86:80:a9:b6:fd:ce:e7:a6:7e:
72:6d:1c:0a:2b:d8:a3:d0:fa:2b:24:10:77:16:ba:7b:f5:b6:
9e:0f:7a:84:3b:54:0e:71:08:ee:6d:33:ac:8a:31:c7:24:ba:
52:0b:b5:da:8c:6b:4d:de:0a:21:6c:8c:c9:94:13:92:4d:aa:
8f:d3:4c:7d:0f:35:bd:40:b1:ef:2a:0c:43:2a:7b:c0:32:e7:
17:0f:00:2c:45:99:a4:ff:22:d0:91:b9:10:bb:e2:7f:b7:4a:
5c:5b:b4:17:31:9e:d6:59:f0:41:fd:a1:79:c6:13:11:16:0d:
a5:ae:9d:38:fe:24:3c:fa:ee:94:40:e4:96:8b:c3:ef:f0:da:
a8:b7:f3:a1:2b:3b:57:e3:2c:c4:3e:5e:a2:b7:6c:0b:72:b4:
38:00:b2:bd:ad:48:30:c3:e1:9d:d6:e4:8c:c9:7c:15:0e:70:
91:be:96:1d:29:d8:5c:51:39:44:f5:e8:e4:75:2a:54:e7:f6:
b0:fc:0a:03:df:70:2f:72:a0:a4:11:62:4d:eb:16:ab:ae:17:
77:f0:d7:14:d3:64:64:f6:66:48:d8:b1:64:e1:1a:30:85:0d:
09:74:21:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:47:23 2025 by rpki-client