Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: VfBarfuHbSyRVNXhx2TIF3HBjMYNMXYHssEGmJevUWM=
Subject key identifier: AF:B6:78:87:F0:11:5F:AE:3C:14:1F:59:0B:6D:84:80:EC:40:05:FC
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019770E376D93CD3A0D1FB24AFB1A2D0BA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 101C
Signing time: Sun 15 Jun 2025 00:00:44 +0000
Manifest this update: Sun 15 Jun 2025 00:00:44 +0000
Manifest next update: Mon 16 Jun 2025 00:00:44 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: DG2ReR8aKCozKQH9HWxcCwgKXgInQS060cXA5fgsDCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:76:d9:3c:d3:a0:d1:fb:24:af:b1:a2:d0:ba:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jun 15 00:00:44 2025 GMT
Not After : Jun 16 00:00:44 2025 GMT
Subject: CN=afb67887f0115fae3c141f590b6d8480ec4005fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:59:99:5f:8b:ba:4b:e2:94:b1:97:9e:20:
8d:1d:7c:1e:48:ad:2d:33:e3:17:e2:bc:c9:e1:55:
58:34:c9:df:9f:c8:4d:b1:2e:f7:c9:98:13:90:d3:
5c:2e:54:6e:9f:34:35:d3:f8:ff:01:5f:ee:66:35:
fe:91:4f:e5:f0:d1:83:c0:4e:bd:c6:1f:df:7f:fe:
f4:e5:7e:f8:ca:74:be:0b:52:80:6f:0e:41:a8:c3:
e8:7b:9e:31:9a:7b:f9:2c:c0:ee:17:c5:14:47:f7:
83:ae:a2:bd:4e:64:d9:7e:53:de:cf:43:d8:9a:4d:
1f:f8:d5:59:30:09:0e:c7:af:03:77:f6:97:fd:69:
ab:c4:60:ac:14:99:b2:e7:b2:ac:2b:07:dc:12:37:
27:b0:b2:bb:f8:39:00:b2:dd:c0:ee:50:fe:79:1c:
97:1a:5c:b9:ac:09:34:93:11:92:16:81:40:40:d9:
05:f8:67:3e:24:35:a0:bd:a4:b7:b4:76:d0:2b:42:
50:2c:69:dd:8d:82:cb:b3:97:6c:04:2d:28:c6:75:
d1:7e:de:18:e8:89:f7:5b:54:f0:3d:46:2f:b3:0f:
11:76:c3:6a:59:9e:f6:81:fc:4c:2b:0c:2f:43:d3:
18:f1:0f:02:f6:80:af:0a:4b:52:34:74:94:01:50:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:78:87:F0:11:5F:AE:3C:14:1F:59:0B:6D:84:80:EC:40:05:FC
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7f:2f:11:24:56:aa:d9:1d:61:59:64:76:0b:d6:ec:be:d5:
19:0e:37:fe:e1:d5:63:e2:14:a6:89:58:b5:8d:73:66:f4:57:
f1:23:a3:03:1c:43:77:70:80:ea:90:e0:94:ee:3b:52:a4:7c:
db:80:c8:de:ac:d4:b7:88:e1:a6:e6:5a:ae:f8:b9:a2:fc:c4:
17:b4:2a:71:65:05:04:70:3d:ec:3f:30:29:21:ab:ae:f6:f9:
32:00:88:fb:0f:1d:fe:97:1d:9a:15:8d:11:cc:3f:5a:1e:19:
2e:92:04:43:fa:ca:c9:8d:97:dc:bd:58:d5:25:af:7b:df:fc:
4d:27:3f:e2:41:7d:b9:81:25:6d:b7:d1:97:51:b1:8b:ed:ea:
7c:32:bb:10:b4:fa:fd:fa:9b:06:a2:51:96:24:40:99:82:ae:
f5:d6:8a:f5:80:d9:b4:98:9c:ff:45:13:cf:6c:ab:07:84:cd:
45:34:16:0f:c7:83:29:d1:9d:41:b1:c7:3c:f3:0d:94:24:d4:
c8:5c:e4:ff:e5:ab:e5:ed:16:92:2c:e7:4a:c1:2b:ac:87:5f:
e9:de:af:0b:b7:01:2e:1e:06:86:54:3d:a7:b4:de:aa:1c:e4:
73:cc:97:8a:a8:98:c1:ee:90:3c:32:a8:c7:b7:56:b6:e6:37:
dd:7d:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:21 2025 by rpki-client