Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: dXzW47OTTElspRG3bLmpaa81MVEvqfwCX5ctqu+agLQ=
Subject key identifier: 07:17:A7:00:52:24:CE:48:95:06:BF:8D:20:49:8D:B2:09:BE:E4:FA
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01976BF48E511716AC10469F2ACB950114E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 01:01:18 +0000
Manifest this update: Sat 14 Jun 2025 01:01:18 +0000
Manifest next update: Sun 15 Jun 2025 01:01:18 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: 9HjSDTH/Nze7blCxG/XcYlkDJm5s6DcGSLThQGUMKB4=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8e:51:17:16:ac:10:46:9f:2a:cb:95:01:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jun 14 01:01:18 2025 GMT
Not After : Jun 15 01:01:18 2025 GMT
Subject: CN=0717a7005224ce489506bf8d20498db209bee4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:8c:24:40:83:e4:13:f4:61:18:6c:c8:7f:
68:3b:3a:d6:c6:ad:40:60:20:9d:b3:7f:28:6c:97:
8e:50:b5:28:a4:e7:a6:7d:cd:87:22:77:4b:a1:17:
07:1c:96:81:94:1f:c5:c4:be:12:1a:c3:1d:17:13:
37:7b:49:88:12:7d:37:8a:a4:48:6e:6c:18:15:72:
96:41:03:8a:88:58:21:50:17:ed:8f:da:31:7f:5b:
3f:61:8e:be:35:ad:76:41:9f:bf:6f:5f:89:d7:d7:
77:9f:49:53:bf:1b:fd:5e:45:67:06:9d:b9:ec:3e:
f7:1e:36:0e:20:aa:be:f1:66:b7:d3:e2:59:42:42:
02:20:2b:94:d3:67:7a:74:9c:6a:ef:37:93:5f:1e:
1b:a7:ea:30:fd:36:ef:62:cb:4a:37:93:8e:40:72:
5b:e2:ba:80:ce:f2:a1:7f:cf:ef:b0:70:9b:63:39:
fe:82:f2:1f:98:6b:66:05:60:e1:95:f4:30:7b:2f:
69:65:0b:7b:53:6a:ff:da:15:70:17:e7:34:45:d7:
06:48:42:16:37:7c:b4:91:a5:bb:dd:6d:40:4c:35:
47:72:d9:dd:52:57:9c:3f:49:8d:66:3d:7f:ad:5c:
86:3c:c7:c7:52:00:9f:e9:2d:35:f0:f4:21:e7:48:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:A7:00:52:24:CE:48:95:06:BF:8D:20:49:8D:B2:09:BE:E4:FA
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:25:8e:fb:ce:64:e4:16:18:06:29:a2:c0:5a:d2:d9:ef:
84:17:78:63:ab:03:6f:1b:68:05:3c:a9:fc:17:52:38:d6:90:
16:56:73:2a:3b:09:75:0d:1d:9d:e1:4b:50:3d:12:32:25:48:
68:d3:f2:20:3e:2a:8e:7e:36:0d:ba:47:b6:e1:07:dd:95:e7:
14:39:86:8c:ce:6b:0f:38:5a:53:3e:43:da:dc:99:1b:cc:55:
0c:a2:40:40:0a:9e:ab:13:80:94:69:ca:28:59:46:a9:22:d2:
12:de:97:a0:82:d0:ab:bb:1e:d4:f6:df:cb:03:c7:b5:c4:ba:
6a:92:a6:0d:0e:01:ab:8d:95:43:c1:81:ed:f7:46:06:fb:e5:
13:91:78:fd:d5:9b:d4:75:9e:29:6c:bc:4a:f4:e7:14:76:7d:
ba:4a:1c:58:3d:93:e9:e3:20:cf:b0:6f:a5:af:5c:73:ce:81:
62:8c:a0:7f:61:df:2a:86:4f:de:b2:0c:76:8c:c9:73:57:e1:
2e:93:58:7e:de:36:e6:a8:06:41:f4:8d:30:be:be:0b:d6:39:
0e:f0:55:19:e5:8d:38:9e:95:ea:37:6c:7a:80:71:8d:ca:01:
5c:14:ce:41:e2:78:2b:3e:21:7a:ad:f2:53:0c:1f:4b:aa:4b:
0a:4c:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:38 2025 by rpki-client