Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: MY+0JSQ6RSUUQwnSza9+Q7jrRtQ6cvDCBzTI1CAZTQo=
Subject key identifier: 5A:6B:3D:EF:C9:B4:2B:58:66:ED:AC:81:90:99:F0:13:10:29:47:D6
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019769CEA5DA0238D810263CA309AB74BB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 153C
Signing time: Fri 13 Jun 2025 15:00:39 +0000
Manifest this update: Fri 13 Jun 2025 15:00:39 +0000
Manifest next update: Sat 14 Jun 2025 15:00:39 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: kFmFwR/UWXXC75iDcI0u0tonEl0x2kykIbxG3jRLYMc=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a5:da:02:38:d8:10:26:3c:a3:09:ab:74:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Jun 13 15:00:39 2025 GMT
Not After : Jun 14 15:00:39 2025 GMT
Subject: CN=5a6b3defc9b42b5866edac819099f013102947d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:34:8a:dc:ca:14:71:64:3a:91:7f:20:a7:
92:39:5b:3b:f0:bd:67:15:ff:14:a3:fc:48:6b:93:
40:78:d6:08:70:f8:36:6b:98:29:82:ee:d3:4a:22:
7b:33:41:2a:a3:3a:4d:2f:95:85:15:6e:9b:88:b4:
df:0d:e2:ee:3a:a0:e0:a6:3a:c6:90:c1:45:c8:9b:
0b:ed:c0:5f:1a:55:3f:91:71:63:1c:12:02:30:72:
8b:e8:13:ac:27:9b:da:41:25:c5:6c:5a:3b:26:9a:
59:49:83:17:90:a6:43:57:86:a8:6a:ab:46:b9:c4:
04:5c:c0:23:ec:45:87:56:64:fd:e2:50:ae:a2:23:
03:89:14:42:57:88:cf:c3:67:33:05:97:d3:66:cc:
12:e0:32:8d:fc:d4:be:5e:4a:7f:5a:17:c8:f0:20:
bf:4a:a2:5f:18:fa:a2:09:f0:df:95:de:c6:68:d7:
14:a2:5f:a2:93:39:e7:10:a0:fe:dc:8a:fa:c5:4d:
62:8c:a8:eb:82:b9:f5:62:44:d7:64:6b:ea:6d:61:
e6:2c:0e:0e:50:8c:89:a5:cb:0e:f4:6e:32:e3:9b:
c3:58:42:75:47:ec:9a:50:76:ec:88:f1:70:41:97:
bf:12:83:08:7c:b4:fe:e8:69:c6:bd:d6:c9:7f:ce:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:3D:EF:C9:B4:2B:58:66:ED:AC:81:90:99:F0:13:10:29:47:D6
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:ad:70:75:ba:73:2e:6c:a4:37:b0:9f:1c:f3:fd:2f:95:
31:bf:77:21:9b:98:19:7a:ce:02:21:7e:14:3f:ff:33:78:a8:
50:3b:b2:14:8f:e6:49:eb:5c:23:a2:ca:79:c0:a8:15:39:fc:
ed:0e:a3:fa:1a:99:67:96:d0:b9:29:33:ab:68:7a:ba:2f:55:
3e:d1:f1:91:6b:f0:25:6b:1f:02:ab:81:55:d1:88:a5:44:8c:
28:92:51:fd:1e:22:99:e1:d2:99:b2:0e:65:9c:98:81:02:10:
03:7a:dd:d2:cb:45:83:64:9e:00:39:06:ed:1a:ea:f9:f8:4b:
a1:7f:bc:14:a3:9f:55:04:7a:f5:b6:76:6d:c6:4d:fd:ec:17:
23:0a:07:b2:a1:04:35:ce:b7:b6:43:c9:91:72:42:a3:3d:ca:
51:1e:38:26:5d:72:89:c2:b7:36:d7:53:2a:5f:cb:6f:43:1b:
f3:c8:e5:84:c6:41:83:bd:c0:74:e1:02:9e:a9:1e:d0:2c:48:
52:9e:c9:a0:66:3d:41:63:8c:ef:8a:01:5e:f4:11:09:52:0f:
aa:46:6a:f4:1d:42:91:17:4d:2a:a1:57:f1:a6:36:c4:2f:00:
d3:51:7e:2e:85:4b:81:13:c7:ae:91:07:97:77:0f:05:8b:cf:
63:91:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:40 2025 by rpki-client