Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: VkiOyMxfnLyQhk38PdHRrvS+9pmgczz5E8JCg5ksm+w=
Subject key identifier: 47:04:78:87:5F:76:51:0F:79:C8:94:4B:F1:77:35:B2:0A:FC:80:67
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01976D3E739F96348F7376B59402310F28F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 07:01:38 +0000
Manifest this update: Sat 14 Jun 2025 07:01:38 +0000
Manifest next update: Sun 15 Jun 2025 07:01:38 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 0c/zRaUhjRqpdu2ue+uQgzdU8E3eOroLnRffS8q0lYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:73:9f:96:34:8f:73:76:b5:94:02:31:0f:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jun 14 07:01:38 2025 GMT
Not After : Jun 15 07:01:38 2025 GMT
Subject: CN=470478875f76510f79c8944bf17735b20afc8067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:4f:e3:08:e1:5d:e6:2d:3e:d0:76:e7:5f:
a8:ef:ca:fb:d1:8c:da:2d:9e:6b:35:18:ac:85:fa:
83:49:eb:a8:a2:73:64:b0:fc:1c:8a:a5:d1:1a:21:
fc:5e:6a:13:c3:93:81:97:03:ca:a5:79:79:6c:86:
88:91:b2:07:16:ca:75:cb:92:e2:e0:d3:e2:40:6a:
84:b9:ea:a6:b0:3f:d4:b1:93:c6:9e:55:11:5b:6d:
85:b7:c4:e9:0b:76:ad:22:e2:ff:a2:ec:7e:95:c2:
89:ed:07:4d:36:60:a8:d6:ec:76:a9:08:ea:cb:14:
f7:3c:97:6c:2f:85:33:35:a6:93:65:9b:a7:86:72:
6a:09:29:27:c1:ca:d6:28:bc:ca:0b:fa:ba:a3:f9:
13:b3:25:05:43:3c:de:b8:95:91:83:91:2a:79:66:
62:be:b3:fa:e6:24:7f:04:95:ea:e0:9d:09:55:02:
0c:46:0b:62:c4:68:62:0c:dc:b4:1e:a3:3a:92:5f:
74:38:d5:da:7e:8f:3b:b5:85:8e:2f:47:fe:b6:2c:
cc:06:7e:cb:60:64:99:f4:f1:87:8e:2d:9d:47:ba:
77:f1:65:bf:cc:ae:60:45:26:8a:3e:99:75:25:d8:
45:a5:be:99:35:98:0b:2e:ec:4a:a0:d1:26:cc:f3:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:78:87:5F:76:51:0F:79:C8:94:4B:F1:77:35:B2:0A:FC:80:67
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:69:0e:34:de:80:33:d1:e1:b5:38:a8:3b:72:d1:47:de:
4d:20:6a:c0:13:a3:40:1e:fa:ed:10:1c:8f:34:24:9f:9b:3d:
6a:e9:8d:9b:81:e2:05:36:8e:ec:da:57:98:9b:6c:d3:c1:74:
11:a7:31:47:a6:80:b9:27:20:de:61:7b:e8:5c:60:18:e0:9d:
e6:ec:7f:bb:d0:61:9a:dd:0d:1f:ee:ac:75:0c:f5:5b:ba:54:
7f:67:43:06:8f:38:57:44:79:79:dd:00:b7:a0:f9:ad:ee:58:
3d:01:3c:d9:f7:4f:b9:e1:51:d0:9b:d2:8a:1a:84:52:48:66:
a0:b3:00:c4:85:a5:34:80:60:07:4d:a8:53:4d:85:71:a3:fa:
05:48:a7:cc:12:12:28:be:4b:b9:26:e3:3b:5d:6c:56:23:dc:
8a:f1:84:b8:4c:93:77:da:42:41:98:d5:f3:95:59:30:72:2f:
4a:14:16:72:98:f1:c7:a1:ab:2f:49:e1:e5:fc:0f:81:d9:2c:
93:6c:d8:0c:d8:bb:07:ac:52:e5:3b:22:c9:78:47:c5:6d:6f:
40:8b:cb:7e:43:39:d0:0d:5c:0a:4c:90:91:e0:1d:2d:ba:c7:
26:93:5a:71:a8:5b:10:34:e5:d4:08:72:41:4f:04:30:f3:b3:
76:45:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:16 2025 by rpki-client