Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: K/tEenYVfAfFPKgpdqr4PB7UUVkD3PGn8yjLv5TqXWA=
Subject key identifier: 9E:E2:D9:8A:2E:BA:D5:75:90:5D:B2:3C:9D:66:8A:F6:93:3A:C1:AC
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 0197C75D87E1FAAF882430FE2E041C2779EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 19:01:24 +0000
Manifest this update: Tue 01 Jul 2025 19:01:24 +0000
Manifest next update: Wed 02 Jul 2025 19:01:24 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: e/oGEo64834BSxdNIG0u0VV1RafqWFWme0pRchB9gWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:87:e1:fa:af:88:24:30:fe:2e:04:1c:27:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Jul 1 19:01:24 2025 GMT
Not After : Jul 2 19:01:24 2025 GMT
Subject: CN=9ee2d98a2ebad575905db23c9d668af6933ac1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:da:7f:0e:05:77:d2:11:14:37:cd:45:c5:
17:0a:76:e7:c9:d7:85:20:15:98:3e:a7:89:b9:54:
e5:36:0f:2a:88:52:28:98:04:77:8b:de:05:11:d6:
e3:15:a4:f9:d5:e9:2e:c0:d0:be:31:29:0f:e1:ec:
54:5d:b4:5f:ed:ec:d4:01:1a:f2:7b:66:92:52:30:
99:5f:1f:71:d8:db:8e:1c:53:b2:f5:b6:9e:a6:ba:
01:4c:71:89:ce:c8:6f:e4:59:48:04:1e:88:30:d1:
a8:f1:be:46:52:a2:a4:4e:55:40:6d:98:4f:0e:70:
c5:9b:df:e4:7d:a1:8e:fd:9d:d6:9d:9f:1e:34:45:
9e:42:0c:e0:34:e6:4e:98:19:75:9f:66:2f:f0:40:
f0:97:86:59:33:55:72:4d:18:9b:3c:d2:4f:95:ae:
86:e7:a1:29:21:c1:94:78:16:31:ed:32:73:b0:d4:
82:44:1b:8c:44:d5:dc:83:5a:57:c9:a3:c9:83:a9:
22:cf:f4:cd:1b:46:7e:ed:8c:20:cd:32:e8:32:dd:
d7:a0:4c:03:37:23:68:e9:c1:a4:d4:2b:ee:c0:be:
7e:3f:0b:61:c1:25:57:c7:c0:39:b4:ef:09:22:52:
e5:97:c9:b0:16:27:14:9c:4c:96:f9:0a:c3:f8:a7:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:D9:8A:2E:BA:D5:75:90:5D:B2:3C:9D:66:8A:F6:93:3A:C1:AC
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:21:51:94:57:f7:4a:bb:b8:b0:84:fe:32:22:c4:62:78:d4:
db:ad:c0:fb:e6:45:ce:4f:63:d7:8d:a8:0d:78:1f:65:0b:fa:
f5:e8:42:8c:1f:63:c4:b3:32:2a:ce:d7:f6:07:12:3d:01:ab:
11:c2:f9:b9:62:6d:32:af:8b:50:08:28:32:8e:34:3a:38:65:
a2:08:75:55:18:54:44:55:07:a4:0a:3f:78:af:16:2a:37:41:
1e:3f:29:72:85:3a:a6:c8:12:3f:70:e6:69:0e:98:28:df:af:
56:71:e2:ff:31:0d:1d:2a:44:2d:09:98:d1:a6:49:e2:c6:35:
2c:f7:48:6e:b7:df:99:89:f1:85:69:68:94:91:5f:7b:d0:52:
60:66:5c:83:a0:e0:dd:bd:3f:d4:5d:dc:ae:8e:97:2a:49:4b:
29:df:1a:94:d0:fc:5b:55:59:ce:fe:92:43:a9:b6:e9:01:79:
d6:87:36:08:ad:2e:e9:4f:73:e1:ad:cb:b4:5d:89:67:73:65:
5e:c9:33:08:24:2c:75:38:69:01:32:9e:45:67:06:36:79:2b:
94:e3:cf:aa:cc:21:39:92:94:9c:2b:a8:e0:49:7a:b7:99:96:
df:50:07:15:06:2e:03:48:d6:ae:9b:f7:dc:75:61:d1:93:1a:
68:37:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:21:14 2025 by rpki-client