Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: IS4whXRMoNzWUiWlenKFQYLNoJOdM9Fs1gcvJ2wjNUk=
Subject key identifier: 4B:24:C7:8A:90:C5:D4:06:30:24:69:D9:19:0F:AC:2E:EA:2D:79:B3
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019770078B012CAF820E6AB7759DF3D22BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 059D
Signing time: Sat 14 Jun 2025 20:00:31 +0000
Manifest this update: Sat 14 Jun 2025 20:00:31 +0000
Manifest next update: Sun 15 Jun 2025 20:00:31 +0000
Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: rXRrGnqNybB74+FZamKCiYkjv0hXMzDwfukz0G2VYYE=)
2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:8b:01:2c:af:82:0e:6a:b7:75:9d:f3:d2:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Jun 14 20:00:31 2025 GMT
Not After : Jun 15 20:00:31 2025 GMT
Subject: CN=4b24c78a90c5d406302469d9190fac2eea2d79b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:4d:df:2b:95:25:08:d8:0f:3f:b9:9e:2b:
f0:d8:95:b4:bb:40:39:00:47:87:0c:5b:e0:7c:bc:
ac:79:2a:e2:7a:b1:b6:37:72:4f:d2:9c:53:e4:e7:
04:34:1c:d6:b0:b9:82:bb:51:d7:79:16:ad:4f:b5:
e5:94:61:1a:64:66:72:73:bc:4e:35:9f:6c:19:a0:
87:14:5d:06:b2:f8:56:1c:40:7b:27:95:db:be:7d:
69:ce:f7:f8:cd:c3:20:a3:cd:46:70:97:f5:2f:40:
1e:68:20:a3:13:cb:05:5c:33:bc:f1:08:5d:b4:cc:
a6:92:11:e2:93:90:3b:3c:ce:a7:af:ba:e8:d3:97:
54:15:16:91:73:f8:1d:03:03:1d:64:02:78:33:52:
aa:9d:4d:02:aa:ad:4e:f4:36:b7:78:f9:dc:97:f7:
71:f4:81:09:82:32:47:ba:4d:eb:94:58:d1:df:63:
0a:47:64:a3:93:4b:cc:7e:df:d9:38:9f:4b:53:51:
61:39:fb:fb:77:04:82:39:97:82:69:a8:1a:49:d2:
e7:7f:e5:29:60:57:64:47:60:a7:4d:c4:3c:e2:fd:
ca:0a:bf:19:46:f3:c4:4a:fa:7b:aa:62:b4:2f:48:
d7:df:87:e7:17:4f:fa:2b:d9:20:4b:96:82:b5:68:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:C7:8A:90:C5:D4:06:30:24:69:D9:19:0F:AC:2E:EA:2D:79:B3
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:29:e3:9c:92:50:45:f5:e3:b8:cb:50:3a:32:ad:09:42:e3:
19:8a:71:42:cc:11:48:f9:6c:b6:6f:5a:cb:2b:e5:a0:9c:88:
79:b6:20:aa:d2:ae:d5:7c:05:5b:81:a1:c8:dc:06:ec:be:6f:
23:74:24:8f:27:3e:ee:3a:57:e5:9c:13:91:4f:6e:27:4e:fd:
63:d6:84:ab:91:49:87:69:c0:0b:d1:4a:36:76:92:ff:a0:9d:
37:db:2d:75:e2:8a:c8:b7:f2:30:d1:9d:3c:36:c4:0a:f9:98:
f5:89:2a:31:2d:7c:b5:1c:4f:d0:4a:5d:55:06:6b:ea:d8:05:
8c:62:bd:3e:c1:36:e3:77:8a:97:4a:b1:04:5b:af:da:ce:51:
37:0a:ef:38:b5:71:99:d1:57:96:a6:18:2c:97:9f:d3:ee:f5:
c5:35:b3:55:66:9c:2e:e5:cf:bf:9e:ab:57:46:62:f2:91:ed:
7e:d2:fb:19:bd:03:e6:d0:fe:e0:7e:8b:10:e5:ea:67:4e:8c:
32:8c:2a:8c:bf:ee:fd:25:f7:4c:d4:0e:04:3f:6e:94:b6:c2:
19:1b:7a:4c:38:8b:9d:27:7c:db:91:84:b8:62:88:c8:6a:df:
9e:ee:2c:63:42:40:6e:61:11:af:d0:88:b3:b0:49:76:83:74:
db:e6:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:06:54 2025 by rpki-client