Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: NxmZ0QCUO2mNoTfFuc0Yg0vtKgYO5Afw20bfeZaF8ag=
Subject key identifier: A5:01:7F:17:ED:92:47:B2:E4:21:46:82:77:6E:7B:2F:0C:D7:12:D2
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0197722D2099320DF4B398872B9422008807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 05D4
Signing time: Sun 15 Jun 2025 06:00:49 +0000
Manifest this update: Sun 15 Jun 2025 06:00:49 +0000
Manifest next update: Mon 16 Jun 2025 06:00:49 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: zbNVkoq+p8DBRb2av4y+FjBDIo1R/9q06qD3S3arF80=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:20:99:32:0d:f4:b3:98:87:2b:94:22:00:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jun 15 06:00:49 2025 GMT
Not After : Jun 16 06:00:49 2025 GMT
Subject: CN=a5017f17ed9247b2e4214682776e7b2f0cd712d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:87:41:78:d6:4c:14:e9:dc:61:44:9a:7d:
2f:68:8d:c5:b7:1f:d9:59:db:cd:2d:f3:81:a0:eb:
5a:1c:be:f5:bc:fb:2e:75:50:2d:84:7f:91:bc:23:
1c:d7:32:65:c3:ea:ea:47:57:44:71:90:03:2b:1b:
1c:6c:62:9b:7f:86:44:4f:1b:e6:15:c1:6a:ec:08:
d4:c4:e2:f1:31:b1:23:7f:09:fe:6b:19:92:07:3e:
24:59:78:83:4f:77:ac:dd:9d:55:b6:6d:d4:52:ed:
b7:ab:81:3e:d5:00:b8:e1:fc:83:9f:79:22:99:de:
5d:fb:3b:63:31:3d:7b:2c:5d:a4:bc:1a:43:33:9f:
92:cd:1c:aa:e2:38:09:ca:89:50:7f:21:fd:9a:62:
aa:96:d4:b6:01:2d:94:af:aa:15:dd:84:8a:4e:91:
84:43:08:4e:12:2a:8b:ae:8e:28:97:36:13:8f:88:
7e:ee:db:c8:6e:6b:3e:d5:c0:a2:ad:0a:5f:9c:4e:
05:4d:62:96:84:ca:16:f6:33:4a:7c:8f:34:3e:ff:
8d:77:15:49:e4:4d:54:65:d4:ae:ac:01:d8:d0:0b:
c2:ba:a2:42:27:58:73:02:26:49:d0:b8:25:80:59:
50:f8:83:a4:4c:9c:2c:9e:ae:e8:f2:ec:23:ac:63:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:7F:17:ED:92:47:B2:E4:21:46:82:77:6E:7B:2F:0C:D7:12:D2
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:6f:d0:ed:ca:95:22:66:3d:98:41:10:b0:c1:4b:77:f0:
81:ee:6f:84:77:d5:8b:55:be:c0:01:8f:f1:bb:ab:6f:4f:c0:
3c:5d:c6:af:e3:7c:a3:f3:2f:77:a0:04:e3:bf:66:fe:ce:59:
7b:74:62:38:22:49:f2:2b:95:19:07:a2:8c:c0:0d:83:21:eb:
53:47:59:1a:b0:45:68:64:08:df:f1:ee:6e:7c:5d:16:5a:d1:
f9:2d:bb:f5:ea:24:6f:d8:37:9c:7f:e8:87:db:0c:83:8f:ab:
f8:36:b9:96:3c:49:64:d3:02:9b:70:a6:b4:cf:20:44:5a:0d:
ab:67:be:1b:c7:2a:47:e9:fe:f2:12:b6:d5:ad:7e:7a:de:c8:
97:77:64:37:2a:95:07:f5:67:6f:6f:d3:2b:bf:c0:26:35:26:
4c:83:8a:0f:58:56:87:5b:2b:fc:56:38:28:f2:28:d8:f2:2c:
d3:0b:b2:9c:6f:e4:e6:7e:ad:5c:e2:84:fc:da:0c:86:f8:42:
7d:3c:19:d1:b9:a3:00:8d:80:cd:63:45:32:3b:9d:48:72:03:
a2:ae:7c:87:ae:6d:c8:17:1c:ea:3d:37:15:15:90:82:93:8b:
06:f6:59:11:94:94:b6:eb:c7:d6:b9:65:f5:fc:3e:75:79:48:
86:81:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:51 2025 by rpki-client