Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: iZEPlJhRG/zRLMHn3bR+WlX7nWyEPgjW1tka1Jbf+1g=
Subject key identifier: 3F:FB:CA:40:68:19:06:DD:42:13:9D:16:A9:84:A4:68:3A:E1:39:A2
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0197684E7D9520B9C7AD2FABF691A59B4598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 08:01:03 +0000
Manifest this update: Fri 13 Jun 2025 08:01:03 +0000
Manifest next update: Sat 14 Jun 2025 08:01:03 +0000
Files and hashes: 1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: en5nvsLW6JCxOSKGHJWrP61uRJw3fIA58EyP24wTyM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:7d:95:20:b9:c7:ad:2f:ab:f6:91:a5:9b:45:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jun 13 08:01:03 2025 GMT
Not After : Jun 14 08:01:03 2025 GMT
Subject: CN=3ffbca40681906dd42139d16a984a4683ae139a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:5b:39:57:68:ee:7d:0d:ae:3c:42:f8:5c:
03:a7:99:82:dd:47:cc:b0:70:4e:71:bb:7a:d2:e7:
26:c2:10:d8:f9:a2:bc:67:ab:61:83:49:72:e9:1a:
78:60:25:1e:61:7e:4a:3e:b4:4d:98:f7:6f:82:03:
fa:6b:98:23:54:60:dd:97:ab:d1:59:cc:01:a4:fc:
ed:9b:07:d4:48:60:4b:9b:4a:6c:7b:c2:74:1b:60:
5b:78:fa:9f:07:25:f3:c1:e3:88:64:86:f2:56:79:
ea:13:6b:7e:2a:42:5a:65:88:00:2b:45:fe:55:9b:
26:34:25:e7:c0:fa:bc:78:64:bf:67:47:70:14:cc:
30:08:e9:fd:0c:1f:05:45:42:33:c9:d7:eb:dd:81:
04:d6:3b:e9:56:3d:2e:7e:0b:96:d0:52:72:c0:b4:
11:49:b6:bf:ee:d9:db:15:8c:6c:a7:dd:72:00:be:
87:ff:51:7b:1d:eb:94:97:65:13:aa:ac:68:cf:61:
b7:61:66:be:e4:1f:31:9a:8b:9b:dc:13:ed:4a:66:
04:c8:02:53:b8:f9:ec:57:c8:e7:64:af:1e:8b:6a:
f7:ba:75:36:cd:a6:10:67:a0:0e:b1:09:29:5e:86:
62:02:cf:93:2a:b7:59:69:ec:91:23:b9:7f:9d:d9:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:CA:40:68:19:06:DD:42:13:9D:16:A9:84:A4:68:3A:E1:39:A2
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:62:e1:3c:2d:61:c5:d8:91:c4:10:3c:e7:ea:81:b8:0b:5f:
e5:0f:ef:e5:cf:fc:19:aa:83:d9:7a:13:b2:be:98:eb:c2:de:
e4:ad:a6:9d:8a:b2:44:41:3e:6f:05:4d:e5:d8:37:cc:c0:3a:
2e:d6:ef:eb:63:c8:3c:cb:3c:c9:09:ea:35:e5:ec:58:36:1e:
69:27:be:3a:0f:6a:e4:79:b7:ab:a9:7e:25:42:4f:eb:8c:28:
36:29:98:1d:04:6f:6d:05:28:0a:49:b8:38:7a:57:0c:af:37:
1d:69:1c:2c:09:89:34:34:ec:d7:ef:d3:30:50:d0:01:23:d0:
a0:88:53:91:64:cf:7d:c6:c7:b7:02:20:91:78:fe:4a:3d:bc:
32:a8:cf:18:bc:b8:a2:15:1f:6d:4d:09:a1:26:9f:64:96:0d:
c3:bb:63:14:d6:c6:1f:55:52:bc:f9:fd:3a:f5:a0:cf:03:51:
c9:7c:8b:fe:e2:d6:a9:4a:71:ff:ed:f2:27:2b:29:97:84:8c:
28:ba:af:45:3b:6c:cd:fa:a4:28:0b:11:49:3b:74:d8:5f:3e:
0d:57:0e:6e:63:78:b1:85:f1:b7:13:88:30:ba:73:6f:11:8e:
16:30:68:a2:b0:10:1f:02:e3:a5:3f:26:d9:e3:81:fa:3c:60:
ce:7b:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:26 2025 by rpki-client