Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: w8e++MYEQhN72SWYIsNnTjSDes+K8LotkKhAVdalCDU=
Subject key identifier: 57:A5:7B:DC:01:F7:94:40:27:A8:BD:7A:84:64:2D:77:E1:2D:C3:BB
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0197B89037C1DA5D003C605975780048E7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 11AC
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: LG7LmwRQ4nghMCoDhDGuGWNVJISO2sb6e+M2OmPu074=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:37:c1:da:5d:00:3c:60:59:75:78:00:48:e7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=57a57bdc01f7944027a8bd7a84642d77e12dc3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:ac:73:31:bd:f1:aa:c6:3a:5f:cb:b4:86:
36:59:19:5e:b0:53:b1:1a:72:34:9f:da:0b:a8:ef:
56:ee:c2:8d:40:29:b0:34:6a:c4:dc:9b:a2:41:80:
b2:75:1b:72:b3:9a:b4:ce:b5:54:1a:43:14:fe:88:
39:20:01:5a:aa:7d:25:d7:2e:80:6d:ca:d2:8f:3d:
72:2e:19:a7:49:5b:f7:04:d3:58:8a:d1:1b:19:9b:
f1:a0:ea:08:62:2a:78:72:47:47:fb:5b:17:b7:62:
ea:c3:84:2c:9d:67:96:72:20:a0:63:c7:9c:3e:7a:
26:cc:6a:85:04:90:e7:56:b2:ea:bb:65:17:0a:16:
61:be:31:d8:b6:83:bd:3a:76:63:ad:94:4d:33:26:
37:0e:23:a8:12:db:48:a8:1c:75:f7:51:4b:a8:08:
fa:95:1d:cf:4a:e5:6c:43:a8:c0:f4:6b:bf:85:78:
4e:67:be:a3:86:8c:d3:6c:2a:60:23:07:9a:0a:51:
b5:f4:34:7c:ed:07:f6:ad:c5:d6:b6:4b:c0:7f:7f:
03:76:fe:c2:6f:f8:41:9a:b7:ac:71:74:99:72:ca:
cd:bf:ab:91:29:de:7e:58:df:e3:1c:00:0e:05:26:
6f:21:10:d6:99:a9:d7:5e:9e:46:8e:97:cd:c7:dd:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:7B:DC:01:F7:94:40:27:A8:BD:7A:84:64:2D:77:E1:2D:C3:BB
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c8:c4:95:74:92:77:7c:a5:74:af:dd:22:37:1b:15:76:66:
50:1d:e0:be:1a:d8:2c:ec:c3:e9:56:c6:71:57:26:a4:7c:47:
f7:8f:99:bd:1e:55:1d:d7:81:12:d7:d8:4a:91:54:dc:78:f4:
7e:eb:f1:65:cf:60:4b:e2:5d:03:09:d9:39:bc:19:6a:c8:83:
ea:d2:ea:81:55:8a:b1:59:8c:9f:9e:fa:86:39:87:8c:e8:5d:
e1:ee:00:c0:62:b6:f0:03:1e:63:5d:c2:a3:b5:7c:7b:4d:2d:
ed:4e:e4:be:43:3e:30:04:06:00:cb:09:eb:96:33:2d:bd:5c:
9d:56:68:02:27:e9:4c:53:b6:26:d9:74:58:a2:59:da:1b:41:
1e:e3:f3:26:38:fd:58:fc:ea:9f:aa:33:7a:92:30:d9:45:45:
ca:4b:48:0d:8f:7e:07:9d:79:bb:b4:61:e9:4a:07:ac:7c:8f:
5c:89:6c:b1:8a:1c:86:69:43:15:2b:df:83:d7:7d:19:83:72:
6a:f3:96:4d:c9:2d:1d:ab:35:d8:63:3d:05:10:62:9c:49:0b:
97:83:c3:10:07:fd:98:80:ed:bb:c2:3d:be:13:88:43:7a:3e:
e9:df:df:d7:5b:81:53:1e:a5:79:3b:77:c9:bf:9d:a4:47:99:
84:59:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:22 2025 by rpki-client