Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: /cOfud3muuLFPr96VvRCzxgmsor4tjA1dSttKjy5w90=
Subject key identifier: 79:4A:69:E9:14:1A:2E:44:F9:DA:9C:D2:10:13:36:A6:76:C1:20:18
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 0197B6A0FD4493C438924E4215F9440FA03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0E51
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: sX7obNkzbrC5Cm+LorPLomx7NLOsiBxmGrWUIo652Gs=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fd:44:93:c4:38:92:4e:42:15:f9:44:0f:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=794a69e9141a2e44f9da9cd2101336a676c12018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:65:1c:44:c4:8d:3b:60:66:7a:36:9f:1f:
25:b7:0b:0d:36:fd:3e:93:dd:c6:52:b3:7e:8a:6c:
63:26:3e:56:5c:d4:f3:33:40:a5:22:5e:0f:b1:b2:
f3:ec:5c:40:57:e5:64:df:2b:5e:ff:27:df:6a:3e:
46:a7:f1:0d:c2:0d:b1:a1:b7:2f:fa:cb:9d:d2:1c:
fc:46:7f:64:52:f5:f5:39:d1:30:40:53:c5:56:8f:
fc:d3:dd:9e:94:a4:21:2a:ee:ca:73:5b:29:02:a9:
94:03:ed:56:8d:8a:ad:f3:b6:f8:2e:ca:92:46:90:
2b:43:d2:87:04:31:90:11:34:e6:9a:00:df:35:1e:
80:57:bb:36:5d:99:97:5d:96:fc:13:03:47:0a:05:
0e:d1:10:67:91:6e:1c:42:e4:91:cb:11:33:27:fa:
11:1d:33:18:1c:80:e7:31:a3:a8:f3:a4:c4:67:fa:
8e:b2:03:e8:6e:a0:06:ce:b6:6a:90:da:69:fa:e0:
8f:07:5e:8b:9f:80:35:b8:d8:37:54:da:c0:66:cb:
94:c5:7c:32:c8:74:99:27:10:60:ce:40:14:af:c1:
83:1f:69:54:c9:49:a7:1b:42:37:d6:25:4d:94:57:
35:18:03:03:07:ab:ce:62:d7:58:a9:4a:9c:36:97:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:69:E9:14:1A:2E:44:F9:DA:9C:D2:10:13:36:A6:76:C1:20:18
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8b:ef:8b:6e:ec:9c:5b:a7:14:f3:00:09:2b:bd:94:da:4a:
e0:79:f6:1c:ac:3a:fd:74:53:ae:8f:f7:07:4d:85:d1:67:dd:
a9:46:49:72:69:30:28:ad:60:8f:c4:06:d2:00:08:fe:03:7b:
6b:f2:16:d3:95:db:9d:ab:83:47:a0:10:83:a5:37:19:01:c9:
5f:ea:62:16:76:ab:50:21:31:dd:79:ec:d9:e0:65:b1:95:44:
86:13:aa:56:84:2c:5b:11:53:30:76:dc:79:e0:41:9a:ca:dc:
fe:6a:e5:4f:cd:7a:cf:9d:49:a1:6b:51:5f:f4:14:cc:aa:75:
b1:89:bf:9e:4d:d2:57:8d:e8:af:87:a7:97:b4:3a:f3:d0:7c:
47:11:df:6a:e4:e3:03:07:30:79:4d:43:ec:e7:c4:9a:62:23:
17:98:db:f6:fb:75:dc:2e:3c:39:85:98:ee:6c:d2:7c:25:4a:
62:40:d1:cc:7c:8e:ac:38:04:93:65:a6:47:89:1a:f6:d3:fb:
94:2f:4a:64:f2:b7:67:85:c2:b6:71:25:08:17:a3:73:6c:43:
99:31:83:df:dc:65:bb:dd:c1:21:b5:1a:91:d1:bf:a5:67:d2:
52:6d:57:5f:95:99:68:69:2e:25:94:b8:2f:aa:25:d2:8b:0a:
b7:70:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:52 2025 by rpki-client