Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: gLJsGgKyFjMQbqiPryl24FLEGfEQhLkG3IMWYKU/MYY=
Subject key identifier: 6F:05:8D:0B:03:B9:0B:73:7D:DE:60:A1:8F:27:AB:B0:C9:CB:93:5F
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019770E3425D324E00C05A2A81FCD04B848F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 13FC
Signing time: Sun 15 Jun 2025 00:00:31 +0000
Manifest this update: Sun 15 Jun 2025 00:00:31 +0000
Manifest next update: Mon 16 Jun 2025 00:00:31 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: JUfDhHb7zSHEPj1B8DQIXqy1cXJ7RvG3K9rEj2e3DC8=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:42:5d:32:4e:00:c0:5a:2a:81:fc:d0:4b:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jun 15 00:00:31 2025 GMT
Not After : Jun 16 00:00:31 2025 GMT
Subject: CN=6f058d0b03b90b737dde60a18f27abb0c9cb935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:f1:e2:6a:68:46:21:29:fb:75:c0:cc:d6:
b6:d2:9e:11:12:5d:98:ab:6d:01:3e:2f:10:be:93:
fb:6e:fe:e8:51:22:97:87:8d:b2:ea:65:d3:5e:b9:
e9:60:1d:c8:58:04:36:0d:a6:ac:cb:3c:ce:70:33:
d3:c0:17:68:c9:8e:e6:3c:44:bb:83:7b:13:36:a9:
ea:62:78:e1:37:2d:6f:25:45:5e:7f:ac:86:b4:32:
7b:0b:6f:eb:57:c5:f3:09:db:05:f2:98:c5:58:bf:
03:44:e9:c4:f7:fe:34:a1:02:56:4d:94:fe:67:51:
6a:97:cd:b4:75:b9:20:10:06:2d:4f:e0:5c:a9:0a:
76:ef:36:fc:2a:ef:d1:85:5d:59:a5:7e:9d:0a:63:
28:7f:e3:eb:46:01:23:b5:b2:3d:e0:56:32:18:63:
5c:74:17:d0:63:66:64:fe:7b:c3:2f:9d:cd:95:b8:
f0:f0:15:a2:4f:7f:86:51:e0:96:8b:0b:e6:2f:af:
bb:e6:5f:4f:f6:59:13:1c:6d:7c:17:ca:bc:be:01:
d1:f4:ab:7f:38:29:44:33:1b:a0:e1:63:be:87:cb:
45:56:f1:f8:e0:69:a3:fe:d2:b7:2a:87:34:82:87:
c8:9c:22:c5:17:ea:08:01:df:9e:8d:5e:ed:a6:30:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:8D:0B:03:B9:0B:73:7D:DE:60:A1:8F:27:AB:B0:C9:CB:93:5F
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0a:f0:86:eb:4d:d8:4e:a2:84:53:35:ed:58:14:31:74:45:
8e:14:1c:40:80:fb:c1:95:e0:ae:b2:c3:f7:07:ff:17:42:c1:
40:24:25:ef:7e:99:3c:98:35:21:5a:48:d8:07:e3:ff:94:df:
0d:eb:04:7b:70:08:78:44:3b:bc:2c:9c:2a:ef:4b:de:d0:b7:
ce:1f:ef:27:61:81:9d:04:e4:66:94:7c:a0:92:7d:44:a7:09:
9a:61:f2:14:ff:7d:f6:39:d2:7a:0e:cb:78:41:76:f1:60:5e:
00:ae:49:34:c4:6d:44:34:4d:ae:29:4c:0e:99:b2:b7:9e:b3:
49:6c:9b:42:83:e5:2b:18:54:9f:99:0f:40:cc:f3:bf:26:ea:
9d:c2:76:e6:57:62:90:4f:e0:34:04:00:f4:d9:e7:f7:7b:e6:
58:e9:96:b0:95:7b:c2:d5:1b:4b:8e:e4:7a:f1:ef:03:26:f8:
29:4e:14:5f:61:b1:de:ed:c6:8d:61:9e:09:7d:19:86:7a:21:
e3:2a:52:ae:27:62:df:41:db:ba:ff:76:5d:fb:0b:b1:2e:f5:
1c:61:fb:52:8f:7e:6f:37:5b:8c:64:bb:dd:5e:6a:ee:48:fb:
f5:bb:b4:72:60:a3:f9:2c:b2:81:68:c7:99:a5:bc:14:c5:84:
88:a1:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:53 2025 by rpki-client