Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: czrnqbt1cTbDqnmGb0W/SGHeghKH2Rp6PyVBjDXBo70=
Subject key identifier: A7:48:EC:15:32:55:58:F9:DB:E8:2B:6D:A3:CA:3C:8A:D1:8B:38:C3
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019776E61A353C4EBFED93D4CB7498487D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1201
Signing time: Mon 16 Jun 2025 04:01:20 +0000
Manifest this update: Mon 16 Jun 2025 04:01:20 +0000
Manifest next update: Tue 17 Jun 2025 04:01:20 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: lfCX2cBJlFd/58FJrm2qn7i9ay07bHcv/3g5ZEaDsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:1a:35:3c:4e:bf:ed:93:d4:cb:74:98:48:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jun 16 04:01:20 2025 GMT
Not After : Jun 17 04:01:20 2025 GMT
Subject: CN=a748ec15325558f9dbe82b6da3ca3c8ad18b38c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:d8:ac:75:98:36:b2:67:8e:56:fd:a2:62:
5f:21:c6:85:8e:9a:e8:03:81:c2:70:e0:5e:67:90:
d0:a4:ab:62:e3:b1:ab:45:4a:e3:ef:c6:c7:67:d7:
9f:e3:8e:7e:22:45:d9:94:b5:eb:eb:a5:e7:03:19:
82:f8:b0:18:13:fc:94:ea:2e:85:da:bd:1e:f2:b9:
22:ff:12:71:c4:c8:a8:c6:b9:67:30:f8:e0:60:ad:
17:46:e1:7f:6b:10:5b:fe:b6:27:8c:1b:7a:b0:bc:
cb:11:0b:d8:b5:53:9e:7a:7f:1e:19:5e:6c:a3:4f:
61:1d:80:31:c2:82:87:00:a4:af:16:18:ee:8d:09:
19:b5:0d:55:05:7c:ed:9c:d6:95:54:af:ee:3b:58:
bd:56:be:24:a7:d2:bc:83:df:88:45:47:d0:cf:28:
ea:b0:32:f5:72:ba:3c:19:2e:f0:0e:54:b8:b0:ac:
f9:17:b5:27:d5:af:29:5e:1f:c4:91:15:fe:42:9d:
e5:7c:81:c1:85:1d:ce:3c:fd:32:03:1b:38:c3:c5:
bb:44:a0:d0:cd:9c:a9:26:4d:05:33:b2:04:43:c9:
db:57:67:3e:a5:ec:c8:79:85:38:71:cc:11:bf:9a:
3d:b7:1e:64:c8:ad:0e:de:9f:cb:1e:96:3d:8f:ba:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:EC:15:32:55:58:F9:DB:E8:2B:6D:A3:CA:3C:8A:D1:8B:38:C3
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:77:10:06:e2:42:2c:74:9d:52:7a:4f:51:93:45:99:48:
dd:48:a7:64:eb:fb:95:6c:f1:42:d6:8d:81:1d:b9:54:3a:81:
e2:b2:f2:49:d6:59:ed:d0:de:18:49:b0:ab:5b:3f:14:d7:ff:
00:78:80:d9:50:a3:a5:9f:24:f7:02:58:d2:7e:8c:ed:28:e0:
04:e3:63:eb:2f:63:4f:f3:8f:54:3c:54:97:51:99:11:9b:67:
19:93:21:40:9c:2d:63:e3:93:41:8b:76:03:a0:36:39:19:18:
a1:15:78:f8:41:6b:15:c6:38:74:97:35:58:8a:22:65:0b:fe:
9a:fd:e0:6e:3c:d2:63:b4:79:9e:ce:ab:d9:be:0a:ce:47:40:
7f:3a:63:ea:ce:18:3b:e1:1b:88:a1:d2:a9:43:72:79:12:db:
72:17:fa:48:7e:f2:cb:ed:4b:9f:7d:83:8d:a8:28:1c:6f:1e:
99:e9:7e:59:a0:ca:e1:f2:bb:70:18:b7:92:15:a3:38:e8:b3:
f7:c9:3f:4e:3c:68:f5:62:49:cf:d5:20:b7:55:4d:a7:e4:2e:
0f:9e:22:ca:2d:34:93:37:0a:71:e0:29:e6:4c:a0:64:8b:36:
ef:e9:32:fb:8a:ce:10:2e:f3:df:bf:89:84:ef:44:0f:42:42:
8c:a0:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:17 2025 by rpki-client