Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: dc7AN7os9PWdlo4HVJb//w0xYDnnzmOVTUi4sKAS2+M=
Subject key identifier: 7C:7E:CA:C2:B4:40:D7:27:2A:B8:B0:4F:59:1A:7B:13:19:8F:5B:14
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 01976C2B06E78947A48A4578363B1B2AC9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 08DC
Signing time: Sat 14 Jun 2025 02:00:48 +0000
Manifest this update: Sat 14 Jun 2025 02:00:48 +0000
Manifest next update: Sun 15 Jun 2025 02:00:48 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: J9vj3m498u5132WjNOK81nlbKkfJOYLIKa+uqMwDUMQ=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:06:e7:89:47:a4:8a:45:78:36:3b:1b:2a:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jun 14 02:00:48 2025 GMT
Not After : Jun 15 02:00:48 2025 GMT
Subject: CN=7c7ecac2b440d7272ab8b04f591a7b13198f5b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:d1:3c:1c:bf:aa:ff:69:f5:85:95:dc:3e:
f2:f1:3e:87:76:7d:1a:95:d4:17:1d:90:d1:5e:92:
a0:76:e1:3d:0d:74:ed:bb:f2:67:ab:34:ac:10:3b:
4c:27:2a:33:9c:59:6a:fc:06:c6:3a:b6:13:b4:22:
40:2a:b7:d9:31:82:16:12:ec:b5:cb:fa:ce:2d:df:
9e:35:19:83:9c:1b:99:36:0b:0c:68:96:72:f6:b2:
23:c8:71:4d:84:a1:0a:98:15:51:0d:77:e7:1f:b4:
5b:21:c4:19:16:a3:b5:e6:69:e6:ab:18:15:d4:55:
83:c2:7f:a2:ed:83:bd:8a:4a:3f:52:42:a5:16:77:
37:90:eb:31:b3:38:dd:8f:46:cd:16:05:ce:ed:8f:
41:fe:bb:b4:84:8d:1e:1d:55:c3:cc:15:77:10:c1:
4f:2c:41:77:dd:81:8f:7d:51:d0:f2:a2:7e:00:2b:
37:d4:27:83:4b:35:19:ca:90:3b:64:98:51:5c:df:
36:dc:23:e5:ac:7a:f6:c9:eb:d5:62:eb:08:e6:7f:
0d:d1:f7:1f:55:a8:15:73:00:f2:5c:58:b4:4e:e3:
18:ca:8d:e4:12:5c:a5:ab:af:00:b6:dc:c9:af:a6:
ce:ae:af:ed:1d:b3:9d:68:27:aa:40:ef:c2:7a:80:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:CA:C2:B4:40:D7:27:2A:B8:B0:4F:59:1A:7B:13:19:8F:5B:14
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:e8:65:83:a5:75:a0:c1:bd:d2:74:b4:ed:bf:63:a0:73:
50:c0:9a:fd:b0:df:0b:51:cd:05:ea:19:80:00:4e:0f:b5:7e:
70:62:97:00:33:e2:a6:b7:94:d9:94:e0:c1:5e:ec:fa:6d:37:
51:1c:b4:a7:09:d4:40:21:04:43:1d:e0:f8:35:7f:42:20:51:
43:d9:e3:2c:78:87:b9:92:93:c7:23:a4:7a:04:18:a9:eb:4a:
54:b5:97:b9:93:c3:8c:93:79:45:f3:12:06:44:7d:c1:9f:fc:
ab:1d:a1:90:42:0b:b7:0c:63:51:73:22:93:f8:0d:71:15:69:
54:01:0b:e8:33:7e:ab:2a:44:a9:3e:b2:60:48:9c:1f:4e:d6:
8c:1b:8e:ac:23:4e:fd:eb:e2:fc:11:c8:32:56:98:52:08:84:
eb:37:4f:99:1f:a7:0a:c7:95:f4:1e:e6:0d:eb:84:0c:d3:e3:
b3:a5:ae:84:39:5e:f9:01:a5:99:f1:b1:6f:7d:84:2c:85:6c:
76:af:e6:a0:e4:e4:70:83:8a:7a:84:8d:d9:8e:ab:33:e5:58:
2b:ad:85:17:6d:d0:da:6a:5c:54:53:98:5f:99:46:19:96:47:
8e:5f:f8:9f:92:7e:b7:6a:f7:76:38:b7:28:d9:40:ab:c9:8e:
23:18:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:46 2025 by rpki-client