Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: MmN5qsPmG+zOzJXRK4I4ivN/FtKjbHUArzAio6V7/ug=
Subject key identifier: 62:F8:28:2E:1F:A3:86:B8:7C:C3:80:01:9E:79:82:6A:51:E0:D7:0E
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 019768F2FAC7466D9E2E9D37AB7FC9F08335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 057F
Signing time: Fri 13 Jun 2025 11:00:43 +0000
Manifest this update: Fri 13 Jun 2025 11:00:43 +0000
Manifest next update: Sat 14 Jun 2025 11:00:43 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: wJ+vNkomke6x9ViGfKvox8aFEOoJ97hjv14c/ieNJ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:fa:c7:46:6d:9e:2e:9d:37:ab:7f:c9:f0:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Jun 13 11:00:43 2025 GMT
Not After : Jun 14 11:00:43 2025 GMT
Subject: CN=62f8282e1fa386b87cc380019e79826a51e0d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:5a:2a:06:45:c4:fe:b4:13:b7:9b:de:24:
3b:f4:58:ba:45:12:b7:0b:f4:18:0b:8a:30:14:d5:
d2:05:fc:43:5f:32:37:73:ec:0e:71:b6:3d:b3:be:
87:f2:ec:03:5c:72:08:c4:4e:18:40:2c:2a:0b:b5:
9a:e8:1d:f4:38:a2:1c:21:86:37:3f:70:ed:1d:24:
47:88:1b:56:b6:e2:62:32:8e:67:38:86:3a:27:68:
a6:71:ef:ab:d2:90:39:d9:44:ce:b2:52:41:15:81:
40:6d:e6:45:e1:04:db:5e:6c:95:2c:48:ce:8c:5f:
f1:41:d1:bf:35:88:f5:68:8e:03:32:45:29:0b:e6:
fa:02:7a:45:5c:b6:78:f3:51:55:ea:12:f0:f2:f0:
80:b4:6b:35:97:74:d0:99:f9:f8:2b:33:55:9e:f1:
97:f9:21:a6:08:3b:ba:fb:d7:b9:6a:e3:aa:d3:85:
08:79:99:c5:bf:c5:59:83:4e:a0:86:d9:d6:b2:e2:
ed:14:42:b8:e7:02:33:41:ad:60:2c:7f:21:ed:0a:
b1:55:bb:f9:31:f9:41:d7:00:59:87:8b:89:b5:75:
8a:29:79:91:a6:15:f8:c5:45:f7:57:03:65:49:14:
48:9b:a4:49:d0:0a:c2:43:05:bd:09:f9:51:95:b7:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:28:2E:1F:A3:86:B8:7C:C3:80:01:9E:79:82:6A:51:E0:D7:0E
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:e0:31:03:00:27:ed:b9:8b:1f:42:ba:d7:8b:d2:08:a5:
8f:2f:09:df:12:a0:6b:4f:4c:85:0c:cb:dc:ab:1d:cf:0d:51:
4a:bd:a2:07:f2:06:a9:ef:33:d7:30:a2:4b:80:e4:66:f4:a2:
49:e8:73:d2:d2:4b:61:b8:9c:a5:0e:f2:37:18:fc:49:2f:b3:
02:dc:ef:13:1f:a0:11:5b:40:fa:dc:4a:73:ca:7c:79:6e:b9:
95:57:52:8c:7c:30:cd:2f:92:c9:e5:64:75:96:6a:8a:8b:8f:
23:62:6e:11:38:01:55:78:80:34:f2:cc:52:97:d8:d7:5b:af:
93:3d:af:d3:40:17:db:74:3b:59:77:ae:0c:d2:04:7f:b7:98:
dc:9e:3f:a3:34:d1:f2:df:8f:eb:a5:3d:c3:5f:f3:d3:db:a4:
9c:35:da:05:b7:62:55:5b:de:70:ca:cc:2e:ce:da:f8:66:df:
49:11:a4:93:4e:59:13:03:53:dc:16:27:ef:59:fc:62:9f:7f:
24:ce:f3:69:33:7d:eb:21:8b:cf:8e:0b:f4:3e:26:3b:62:a4:
b5:63:9e:6a:a8:e7:47:0e:fc:d6:d9:bd:8a:90:aa:33:42:5d:
b1:5b:68:b4:a3:e2:54:a0:c6:ff:f9:ce:e9:d4:a6:33:5e:58:
67:8c:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:51 2025 by rpki-client