Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: RXSbFMS0FfAJGmr6AnaXDPB59c+PLkw4SDxcqu/OFKo=
Subject key identifier: CD:82:FE:43:F2:26:DA:40:9B:D7:8F:97:C8:E4:C4:0A:4A:A6:9E:B3
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0197B70E9A90681997C81239C74AD72AA3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: 8W/n0g+9/S27zxL0Osvj72RfZMVuoEz9j4Jr2WuXnVY=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9a:90:68:19:97:c8:12:39:c7:4a:d7:2a:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=cd82fe43f226da409bd78f97c8e4c40a4aa69eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:e9:b7:8b:97:1f:99:d6:1f:2c:80:6f:b0:
09:b6:4c:93:12:81:88:1d:30:f4:45:80:3f:a2:64:
a2:e3:79:7d:b6:6b:31:94:dc:24:d3:f5:09:1f:14:
75:51:c8:fb:e8:09:bf:fe:57:4d:92:f0:a5:4d:5d:
6d:ce:e7:f5:55:f5:86:89:57:6b:50:80:70:a8:14:
bd:5d:e5:76:16:ee:ab:e9:55:ca:eb:0c:a4:6a:ec:
f0:c9:b3:80:b8:78:14:54:2b:16:05:ab:b5:97:39:
0b:15:d3:bb:ab:d2:46:68:25:ed:89:84:7f:15:c3:
8b:73:0e:8a:69:7a:f9:65:39:38:d6:3b:83:db:57:
e3:ce:ca:f2:30:26:a4:a2:b9:1d:24:32:9f:8e:08:
c6:88:8f:af:16:20:1a:bd:e2:60:3a:a0:66:17:c5:
45:74:69:17:45:3a:c4:c2:33:6c:06:36:e9:eb:0f:
53:94:78:3a:18:a7:4f:9f:28:32:13:25:ab:8a:56:
7d:35:40:12:c5:06:1e:c8:37:22:63:fe:5e:8f:1a:
80:22:a9:71:2c:7e:10:36:9c:97:b4:2a:83:58:23:
35:93:63:48:f7:4f:a2:d1:8d:ea:24:9f:c4:ac:ac:
e1:5e:85:1b:b6:38:75:17:26:f6:3d:05:26:68:c4:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:FE:43:F2:26:DA:40:9B:D7:8F:97:C8:E4:C4:0A:4A:A6:9E:B3
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:af:e6:1b:14:ee:45:47:15:41:de:db:d5:83:01:24:1c:
7e:df:ba:41:d7:ca:d6:d8:b0:76:ca:69:40:c8:3b:cb:7c:77:
c4:d0:a5:71:3b:e4:d7:9e:b5:11:c8:0b:d0:ff:e9:55:5d:34:
97:21:3f:03:82:2c:53:ec:bd:40:d9:36:e2:22:b1:ee:70:56:
0d:ea:22:8c:af:5c:02:a9:d3:f8:68:e9:07:9b:a0:9c:fe:b7:
ef:70:66:6a:2b:94:af:55:7e:74:07:50:58:94:a1:18:54:3e:
6d:fb:7e:35:b8:30:aa:31:05:e6:68:c4:ee:54:95:b2:2f:89:
7c:1f:1a:f6:3d:42:2c:59:e1:c9:8a:46:6a:46:a0:24:cf:af:
f4:db:43:2b:53:d9:8d:47:e8:86:05:2a:05:e9:14:0d:2b:3e:
6b:c2:bc:20:73:09:63:cc:8e:63:c4:1a:da:5b:f7:46:6a:87:
c0:13:18:91:8f:22:8a:69:d7:b0:41:9b:72:5a:03:d0:67:ba:
63:05:d3:84:70:24:5c:bf:d7:38:41:99:09:23:17:34:7c:13:
fd:fd:d2:7f:ac:2b:a1:b7:54:c8:32:d8:3c:27:80:07:3b:24:
4e:7a:65:6a:3a:88:2d:4c:a9:a2:5a:f2:db:70:96:65:2b:d4:
a4:bb:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:18 2025 by rpki-client