Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: Q084kt6BwSF9BxXUurDG7/nRPMvjvwTuOtG4+e9TNqo=
Subject key identifier: 6F:B1:E3:BB:CE:0D:60:1E:57:83:8A:B3:AC:07:07:F5:3F:8F:DC:1D
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 01976D3E96C5562AAB5E9C828BFBA67559E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0D8C
Signing time: Sat 14 Jun 2025 07:01:47 +0000
Manifest this update: Sat 14 Jun 2025 07:01:47 +0000
Manifest next update: Sun 15 Jun 2025 07:01:47 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: RpajW4cvZwBIgCtb5De/kxPwdbtK3QDhWDYQIIewzvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:96:c5:56:2a:ab:5e:9c:82:8b:fb:a6:75:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Jun 14 07:01:47 2025 GMT
Not After : Jun 15 07:01:47 2025 GMT
Subject: CN=6fb1e3bbce0d601e57838ab3ac0707f53f8fdc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:77:07:cc:1e:7d:0b:cb:13:46:0f:34:45:
44:e7:be:44:c4:b6:cb:21:6c:17:ed:0f:e5:60:7f:
a3:6b:ab:be:a9:b2:db:48:4b:93:87:78:ce:01:bd:
4a:bb:8a:6d:29:0f:b9:38:de:ca:03:ee:58:85:0a:
14:ec:b8:54:1e:1a:21:8d:f6:84:21:e4:7f:08:1a:
3b:d4:a8:54:b8:a8:70:f6:af:c6:44:52:2f:92:dc:
4a:c6:6e:5a:89:04:17:93:53:71:91:c2:40:06:d7:
8d:b9:af:a3:fa:5c:bd:6d:1e:23:47:d5:4d:f3:2b:
7f:0a:76:e0:f1:1e:10:a9:c8:0a:66:27:66:b2:5e:
1e:b4:45:cc:4f:01:ee:20:b5:8e:bd:ca:a4:cc:ec:
9c:08:c7:ae:d8:b4:c4:66:5d:15:8c:b8:1b:42:33:
dc:0d:be:27:91:70:ea:4a:42:fb:3e:c7:3e:6c:29:
0d:be:b5:e8:fa:90:ca:79:eb:5c:1b:2e:07:3f:e3:
21:ef:95:ff:e1:a6:0b:74:a7:53:d2:3c:25:f7:3b:
7c:f9:b9:e6:65:0b:a4:69:40:b5:47:57:f0:03:a1:
b4:69:a3:28:51:ee:80:91:3a:11:2f:8c:cc:40:a6:
b4:dd:70:ec:98:c1:8d:be:4c:3c:3f:4a:a4:0e:cd:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B1:E3:BB:CE:0D:60:1E:57:83:8A:B3:AC:07:07:F5:3F:8F:DC:1D
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:33:f8:83:ea:11:76:88:20:dd:fc:5f:4b:89:7c:6e:84:a5:
92:9c:a6:07:c6:85:76:fa:55:19:84:1e:92:be:bb:de:a8:8f:
bb:e4:a6:eb:7a:34:c0:a4:70:84:00:13:66:47:ca:c7:20:a4:
39:df:c2:a1:63:b7:15:d3:cb:6a:4a:b2:f3:47:f8:4f:74:64:
e5:b8:af:5f:be:20:b0:7e:96:25:eb:38:ad:3e:2f:12:84:2c:
fe:3b:39:69:c3:26:ee:21:e2:92:14:9e:60:33:2f:0e:24:5b:
00:d7:d4:02:e0:58:5b:82:4a:bf:e8:bf:56:6d:11:3a:58:b1:
fd:30:6b:a8:97:68:1e:9a:29:05:a1:f7:ca:e6:c3:19:d8:5e:
a8:fd:06:a4:6d:e1:11:83:ed:bd:36:8e:06:ad:94:52:29:52:
17:61:3b:78:48:58:8c:75:1a:ca:e0:cb:5a:9b:0b:30:d0:82:
a2:c2:08:81:03:4d:40:d7:8a:85:45:73:b2:e5:47:28:78:33:
ff:3d:d2:cd:78:3f:79:69:fd:19:c3:de:97:c9:47:8c:99:c1:
c1:7c:28:d1:3e:d1:da:45:f8:b4:6c:a9:63:03:8c:0e:a2:ca:
71:8c:f4:5d:93:ce:f9:86:84:ff:f2:4d:34:3e:a2:2e:dc:31:
ed:0c:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:44 2025 by rpki-client