Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: Z5g5zpLmfpNCgRH5AhQOhD7X+BqejZEd2e3N8TzQIH4=
Subject key identifier: E6:96:F5:82:44:C5:72:2D:4D:20:2B:AC:F2:62:16:D0:31:52:41:ED
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 0197B745702FEE00742F4A4C25F93EB7581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 027B
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: IccxwQLGMsNub4RUDRuoKjBid0ZzT6lT3O0qkataGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:70:2f:ee:00:74:2f:4a:4c:25:f9:3e:b7:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=e696f58244c5722d4d202bacf26216d0315241ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:d0:4b:f0:4f:ff:6d:14:6f:f1:19:1c:05:
f4:96:a5:4f:04:20:0c:41:e2:9c:0e:4a:a9:56:08:
a7:9e:50:2d:26:07:c0:0e:5b:01:86:fe:a0:85:12:
05:25:e1:30:2f:54:27:3c:ed:1a:e2:1a:ba:77:19:
d7:dc:cb:e0:b3:36:3c:13:b3:e1:f2:18:9a:a7:4b:
2b:88:5d:66:fb:82:41:f0:5f:31:78:b0:11:8c:bb:
28:75:e7:a2:c8:87:df:74:39:38:5e:a2:c2:d3:09:
bb:69:67:6d:d8:cb:8a:e7:07:34:5e:95:3d:20:4d:
a4:af:51:82:20:eb:8e:58:b1:89:34:76:03:cd:64:
2e:a3:e7:0f:74:fb:a7:91:86:5b:5b:43:b2:01:1a:
83:77:e8:2c:95:75:83:20:1f:d7:75:a8:32:ee:a8:
db:da:a8:8b:2f:b3:65:b5:1c:0d:d7:0a:ee:78:42:
9d:38:a2:77:a0:47:03:69:ff:2b:85:ea:07:84:c9:
2a:c1:1d:5a:a4:73:f8:1e:6b:ca:a0:0e:15:7c:7e:
6f:42:f8:eb:83:5a:80:fd:86:9f:59:6e:e4:2e:74:
ac:0d:4b:47:68:3c:eb:87:31:5d:8b:ed:a7:90:9d:
ef:aa:ec:05:94:05:ab:0b:13:2c:8e:5e:6d:5e:df:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:96:F5:82:44:C5:72:2D:4D:20:2B:AC:F2:62:16:D0:31:52:41:ED
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4a:48:22:4e:d1:9d:f3:10:c6:2b:a1:4d:ee:27:29:ea:cc:
48:f4:45:1d:de:bc:4e:da:b6:91:7e:95:52:7f:23:8c:96:a6:
64:37:3a:8a:0c:1a:78:4a:07:0b:c2:a2:7d:4b:c7:98:87:99:
db:1b:72:03:d3:8b:01:f0:c2:7b:96:b7:0e:09:cb:17:d8:da:
8d:d2:d7:c1:9e:f0:7f:9f:95:4b:af:69:36:77:e6:bb:35:74:
d2:d3:30:62:e2:5c:4c:b7:87:b7:ad:39:c5:f3:a0:32:16:5f:
41:9c:d9:37:ce:77:2c:a8:48:10:1a:2b:df:f3:ca:b1:7f:a4:
e1:74:53:d4:75:c7:4d:ee:aa:b4:74:10:f5:d3:d5:46:20:4c:
be:65:f6:f2:d4:bd:b4:c1:c7:e7:21:55:20:f8:5d:fa:9e:4b:
32:02:5e:e7:1c:8b:8d:93:7d:23:bc:e9:00:99:43:d4:48:a3:
3c:a3:bd:1f:b3:5d:5f:eb:58:47:20:8c:34:0a:9a:2b:0b:23:
ee:95:60:42:67:cf:c3:10:d0:8a:2e:9a:c5:ab:07:b8:82:de:
47:57:98:1f:26:1b:ce:41:f2:30:a2:39:aa:ca:6e:a1:56:da:
ed:5f:b8:29:3a:10:4f:c7:e9:d4:23:83:09:99:5b:c3:da:5b:
d6:7c:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:37 2025 by rpki-client