Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: DcAnRtasau3oG1O8S34zpVttmgR9Nr3f8fez2/DCwxY=
Subject key identifier: 58:49:68:E1:03:E8:5C:F1:01:66:92:CF:78:4B:37:DE:AC:52:94:46
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01976EBE3FBBFC174406384E28E508B3D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0AAC
Signing time: Sat 14 Jun 2025 14:00:51 +0000
Manifest this update: Sat 14 Jun 2025 14:00:51 +0000
Manifest next update: Sun 15 Jun 2025 14:00:51 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: aEA7M6MsHsrnH/+DUnDDA923QsrE6FC7WlksHE0IGbw=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:3f:bb:fc:17:44:06:38:4e:28:e5:08:b3:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jun 14 14:00:51 2025 GMT
Not After : Jun 15 14:00:51 2025 GMT
Subject: CN=584968e103e85cf1016692cf784b37deac529446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:50:fc:65:5d:ab:be:1b:b2:ff:ca:aa:40:
fa:dd:d4:25:76:91:0e:fc:9b:17:6f:ac:5a:2c:f2:
1f:67:de:8f:34:93:0e:d5:19:60:57:12:88:55:19:
58:8f:fd:78:15:b7:3b:1a:7e:66:3e:91:e5:47:43:
1a:02:4f:58:2b:68:06:e3:65:5e:ba:d0:2d:7d:9c:
1f:2b:47:e1:68:5c:1d:9b:15:de:16:c3:c6:cd:b3:
c3:ef:c9:50:33:55:f9:46:23:bb:db:51:46:d2:ad:
73:7a:cb:c5:8b:28:61:3c:0c:b4:bc:12:cd:21:10:
a3:b9:e7:8e:c5:0c:28:de:3d:93:b7:57:22:78:2f:
16:b8:f0:bd:b9:5e:96:01:b3:c9:1a:1b:98:f3:49:
98:de:eb:39:42:55:2d:82:98:cf:17:a8:31:09:e5:
49:33:7b:f1:08:f7:2b:c7:05:59:9f:23:c1:31:77:
43:bc:9e:21:e9:fb:13:8c:39:f1:bb:8a:46:17:7c:
f2:4e:88:c5:e7:b7:fc:3d:ad:4a:7d:d1:fe:eb:f0:
06:e6:f9:c3:40:96:88:0e:b9:d1:f8:9a:73:cf:91:
dc:cb:f8:3c:67:f6:d3:6d:92:97:66:d4:39:94:64:
35:5a:11:6a:ea:c9:8c:77:d9:5a:2e:8d:11:b9:85:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:68:E1:03:E8:5C:F1:01:66:92:CF:78:4B:37:DE:AC:52:94:46
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:cd:ac:9f:99:2a:57:56:58:a0:70:78:17:17:fc:02:fb:
6e:9d:ec:a6:e2:e0:c9:38:75:e5:f3:2f:9b:18:00:be:e7:ce:
95:55:6a:41:bf:b8:76:af:34:68:6c:c9:a8:cd:85:b3:85:47:
a4:b1:4a:ae:a7:e4:00:47:dd:62:31:97:9d:2b:61:8d:55:5d:
fb:56:20:dd:ac:d3:b1:09:c3:5b:01:ea:34:7c:1d:c3:08:a7:
ed:f2:17:5c:6d:87:92:fc:b9:8c:6b:9b:77:bd:46:e2:d7:7b:
ee:ba:63:f3:1a:6a:b4:a0:78:30:e2:48:e2:53:ef:14:7e:81:
fc:f9:79:ce:04:bf:85:b7:73:63:99:a4:d8:98:a1:28:d6:62:
57:85:75:1e:e6:94:f5:07:77:d0:b3:e6:b1:a7:30:39:fe:06:
16:c8:06:14:d5:20:30:b9:7d:52:3f:3c:fe:3d:81:b8:30:56:
4a:eb:1d:09:04:5a:eb:82:58:76:e3:6b:f9:f0:3a:8f:52:8c:
6b:42:07:68:69:dc:52:15:2b:19:01:8d:31:29:5e:82:cb:3c:
2a:8b:7a:64:5e:50:c2:ff:c0:c4:37:36:38:95:ca:e1:23:02:
6b:02:a5:b3:07:c6:03:e3:20:95:11:50:75:c1:a3:1d:18:19:
e4:ea:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:37:00 2025 by rpki-client