Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: IC5T+s3+bJGMOC3rQ6qmHpjyusG3E7ZUikfODT+ea1g=
Subject key identifier: 67:62:AE:AA:2D:FD:11:47:57:39:67:E5:EB:47:9C:4B:F6:76:4C:85
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 0197B6D7B83AF1B2DF4D2E62918EE1C1B82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 0335
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: dAoFEpUMiAd+LY0yiLW0sSVpTDbJ74hB0d/ztKhJY6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b8:3a:f1:b2:df:4d:2e:62:91:8e:e1:c1:b8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=6762aeaa2dfd1147573967e5eb479c4bf6764c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:70:cf:dc:36:7e:29:f6:84:6f:79:81:05:
f7:a9:56:e5:62:1b:8f:ca:d1:df:e0:dc:cf:44:f5:
2f:fc:6b:d2:24:37:97:e9:df:b8:4e:0a:06:83:fc:
0c:82:ef:b7:58:0e:d0:92:d6:ce:9c:fa:8c:23:32:
26:30:ae:c8:31:08:e5:d4:49:a4:a6:56:4e:44:fc:
e0:97:b2:2f:48:45:e7:33:5c:86:4d:30:dc:d5:22:
30:7b:10:bd:16:0e:a9:a5:e6:b2:20:54:19:6a:37:
5c:de:50:9d:ee:d8:02:76:9b:50:db:b0:a2:ce:19:
16:93:67:6b:ac:01:1d:8d:44:30:80:5c:87:04:86:
da:2d:09:36:66:27:55:a5:17:2f:b8:49:a1:cf:f1:
34:2b:e3:aa:4e:d5:4b:82:85:43:4a:ef:54:c9:f2:
35:62:ec:52:43:dc:13:a3:57:40:f1:7f:22:65:d4:
d9:3b:0d:8d:91:26:dd:8c:b5:4d:26:d3:5c:56:23:
56:d9:7f:d7:5b:ef:cd:de:aa:ae:95:eb:86:d9:c9:
c3:b0:ea:55:3d:66:09:8f:d9:49:fa:8a:05:0e:46:
90:30:1a:95:8b:b3:9e:73:00:f1:af:54:d6:d6:6e:
b6:3a:5a:db:b4:2c:c2:4f:9e:0b:51:f7:85:45:fe:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:AE:AA:2D:FD:11:47:57:39:67:E5:EB:47:9C:4B:F6:76:4C:85
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d4:63:16:ba:57:1a:e5:5d:08:ea:56:b9:4a:21:45:a8:8c:
9c:3a:30:02:19:62:eb:22:c0:f0:86:ee:12:4c:3a:fa:ac:ea:
53:eb:0b:9c:cb:b1:84:91:4e:4d:84:69:12:be:52:c7:6e:e6:
8d:ea:20:eb:75:3f:c6:c1:f5:56:4e:43:6c:a1:30:85:0b:c4:
01:37:2b:47:cf:65:33:b1:79:49:9d:f8:cf:3e:df:28:c5:97:
62:4c:3f:cc:e7:1c:99:f9:fe:4f:45:46:a7:6b:0e:75:ad:4f:
84:cf:5d:fa:f0:7f:69:ca:1d:03:92:22:a3:77:34:73:4f:29:
0f:a6:66:f4:6a:7b:77:29:01:f3:32:23:4a:e2:3a:b9:e8:80:
0b:0a:d9:fa:2f:cb:8f:d8:74:e9:66:6c:7b:9f:17:13:28:7d:
77:28:d5:79:a0:c0:90:a9:e2:3d:8a:91:bc:38:2a:40:e3:c7:
69:dc:a2:bd:ce:92:f5:3e:e2:4c:0a:5e:de:68:ee:f2:65:02:
b4:e7:21:88:ec:7c:c1:82:5c:57:6c:81:93:93:b9:e5:e7:b4:
96:c2:c2:c4:8d:a0:41:a3:36:f5:66:6c:32:b0:e2:49:68:8c:
9f:9f:da:82:d2:d0:ba:56:97:5f:ca:1e:01:66:c6:f3:25:80:
70:5e:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:08 2025 by rpki-client