Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: C83O/I3A0ePV72ooCnuTrUiYoitH40MOINT6MIy2ayg=
Subject key identifier: 3A:E9:F9:44:8B:E3:EC:08:26:96:AB:F1:D0:5B:31:AD:B7:D9:E0:D7
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 01977E9F6C46FDF6206F295E1A30E5F744B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0CAA
Signing time: Tue 17 Jun 2025 16:01:06 +0000
Manifest this update: Tue 17 Jun 2025 16:01:06 +0000
Manifest next update: Wed 18 Jun 2025 16:01:06 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: nE5ZJpuuylqeiWgn4cJg1Vc5dxkWTLt9Q8drdHRI0qQ=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:6c:46:fd:f6:20:6f:29:5e:1a:30:e5:f7:44:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Jun 17 16:01:06 2025 GMT
Not After : Jun 18 16:01:06 2025 GMT
Subject: CN=3ae9f9448be3ec082696abf1d05b31adb7d9e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:b3:f1:5d:57:01:03:9c:62:da:a4:ff:66:
36:fe:d0:b5:b9:59:57:89:2f:fc:25:42:8e:db:df:
b2:a6:85:f0:41:f1:61:ca:14:9f:00:3e:ad:27:da:
52:70:94:b6:47:e4:dd:0e:3b:e1:12:0f:91:14:3f:
7e:9c:b7:4a:21:8e:23:eb:89:9c:19:9b:07:9c:76:
7b:a1:1d:b8:80:64:55:72:50:a8:31:99:97:97:63:
0c:7e:d5:cc:13:cf:11:cf:9d:8b:af:b8:b2:c0:83:
86:ae:04:9b:1f:16:53:7b:a6:57:24:6b:8a:eb:2d:
b9:df:b1:88:06:24:75:9a:62:91:95:86:be:18:b1:
60:64:87:c4:a1:88:8b:ba:bd:30:ea:33:de:52:34:
57:18:8a:07:fe:ae:48:1d:b1:b8:82:77:9f:40:d2:
16:81:2a:97:d4:61:7f:6e:52:c5:34:38:e9:0c:34:
ed:c5:08:54:91:ea:46:61:72:5b:39:81:10:1e:3d:
6e:54:f6:95:74:66:2a:93:b8:03:54:8b:79:f5:d0:
fc:a9:e5:74:0f:59:d1:30:a4:ee:76:ee:b0:ad:0e:
72:8b:4f:54:d3:af:72:be:11:e8:ef:b5:3e:d6:36:
15:b8:3c:86:a1:aa:7d:33:2c:ee:2d:01:70:95:f6:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:F9:44:8B:E3:EC:08:26:96:AB:F1:D0:5B:31:AD:B7:D9:E0:D7
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f6:f6:4e:a4:fa:45:34:6d:a0:ad:1b:91:ed:1e:8d:76:4f:
e4:25:3b:04:a6:18:71:b9:e1:1d:b0:39:4a:02:07:35:59:c7:
62:6b:77:dc:cc:8c:e9:0c:21:d5:47:f2:ba:c1:16:3e:81:3c:
91:29:49:8b:87:a7:ed:dd:54:7c:6a:9e:c6:f7:7a:0f:ff:31:
80:34:cb:28:c4:32:e6:52:64:44:3b:ba:1d:7d:7c:45:64:24:
e9:9d:21:d5:9b:8f:12:1b:cf:18:05:17:1a:6e:d6:88:90:75:
63:18:97:7e:d5:07:2d:e7:d3:db:b1:de:44:95:b9:07:23:39:
a1:c6:40:39:c1:32:2c:b5:38:00:08:10:02:a2:51:71:e3:90:
c0:fd:30:2e:95:f5:59:60:e4:45:6d:28:dd:8c:d3:fc:04:6e:
f6:48:8f:fd:5d:62:f5:68:83:ac:7a:7e:db:84:04:39:e7:c8:
43:90:08:d8:70:b3:2e:00:bd:32:05:eb:5a:1a:ba:ba:d3:f1:
d4:e6:98:65:6e:94:bc:ea:0e:c2:af:5d:bb:2f:31:a2:c2:d6:
88:96:ff:27:e2:74:3e:a1:32:22:2a:36:68:ea:af:63:92:64:
f2:c2:4b:81:27:55:12:34:13:79:bc:13:1a:1e:71:9a:4e:03:
fe:bb:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:28:47 2025 by rpki-client