Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier: oGlPq/FsAR4+NKY1jXcenI9mHGxSOPGXtrW2xeG4D3M=
Subject key identifier: B2:3D:7A:65:A8:BE:FB:BD:F2:11:21:BA:CE:D2:2D:F7:60:C6:4B:87
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial: 0197711B4556A1977F6A8730F47D00E99E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number: 0FA6
Signing time: Sun 15 Jun 2025 01:01:41 +0000
Manifest this update: Sun 15 Jun 2025 01:01:41 +0000
Manifest next update: Mon 16 Jun 2025 01:01:41 +0000
Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: Mn9F2v/D2W5KrckHDLd6whgjsWCyNAfDTOSXqbNtEtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:45:56:a1:97:7f:6a:87:30:f4:7d:00:e9:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
Validity
Not Before: Jun 15 01:01:41 2025 GMT
Not After : Jun 16 01:01:41 2025 GMT
Subject: CN=b23d7a65a8befbbdf21121baced22df760c64b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:ad:2c:de:3c:7d:62:18:74:2a:21:fd:97:
48:9e:8a:0b:eb:f1:da:5f:90:28:1b:ca:85:78:a3:
43:86:92:b5:b7:ec:76:2e:b1:0f:a9:0b:66:89:5e:
6d:bc:0d:7c:50:d4:62:fc:fa:31:c9:82:47:cb:91:
6d:b3:0a:40:53:ed:85:c1:49:3f:cb:fa:89:e6:11:
1f:06:a3:79:c3:ca:7a:84:7d:68:49:78:f9:cb:ee:
b0:46:f4:dd:5e:59:e7:a7:5c:70:da:49:de:7b:30:
f6:ed:0b:6e:08:6c:2e:c3:1b:15:7e:99:ee:dc:a6:
f6:c5:ac:9b:f1:4c:35:66:a2:75:e5:93:ad:a6:29:
6e:8c:46:b4:ec:b8:6a:2d:70:0f:0c:9f:d5:ca:fc:
67:84:32:8e:99:1f:15:b4:b0:ee:7e:c3:10:87:b6:
a5:b5:e9:a6:ef:8f:a9:10:00:1d:46:a5:ff:b0:61:
07:c2:8d:a8:8d:03:ac:b6:73:de:73:7c:10:6f:23:
e8:55:6c:13:98:a9:9b:eb:1e:c4:30:66:72:58:5d:
82:5b:52:df:e8:db:69:78:a1:9a:d2:0e:8b:97:aa:
d3:a0:be:ff:f1:d8:f4:9e:1d:c1:ba:bf:db:b1:93:
2b:4d:02:93:4d:c5:71:f7:79:45:50:10:41:71:0e:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:7A:65:A8:BE:FB:BD:F2:11:21:BA:CE:D2:2D:F7:60:C6:4B:87
X509v3 Authority Key Identifier:
keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:16:53:33:d9:4a:43:31:a0:88:79:f3:b8:99:e8:9e:b9:6e:
18:76:25:c8:22:79:9f:f6:b0:a7:e2:ca:b5:28:4d:7e:3b:8d:
09:8d:c5:72:61:a1:08:94:2b:c0:10:fd:fc:2e:a7:f8:19:0f:
b9:44:b2:c4:79:f1:9c:44:3a:17:95:01:26:f4:2d:15:f7:c4:
9a:01:93:1f:de:42:66:7c:b8:c7:b9:42:85:d3:3a:b2:d4:db:
86:f8:e0:50:57:41:42:e9:a8:c5:51:25:97:37:66:99:6b:05:
02:9e:ce:a9:56:3a:70:45:57:ce:56:c1:4c:70:02:49:f9:cd:
40:17:55:08:f0:0b:b1:f1:74:9b:14:5f:eb:a3:68:b1:0c:f5:
08:39:82:5d:1d:32:6a:68:f4:3d:cf:69:48:c1:6f:94:2a:1e:
0c:08:3b:05:6b:52:eb:5e:b8:4e:06:f8:54:e9:e7:64:b5:c7:
fb:c9:71:58:11:ef:05:4a:e7:38:60:a1:0f:ec:ff:6f:16:9c:
88:b4:ab:0d:fd:13:dc:f4:dd:8f:47:d5:c3:bb:76:eb:dc:85:
c0:64:50:a3:70:4d:35:ee:07:23:a4:76:71:40:e3:37:c3:e3:
23:47:4b:29:7d:0d:5c:52:b2:64:f4:f9:45:aa:84:33:30:42:
9c:8f:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:15 2025 by rpki-client