Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: IzLIXN5vi+wiW/Jjwq7QrOYGt+wmQMnN+GHRkbvWKDc=
Subject key identifier: 54:F7:52:33:C2:75:04:25:BC:66:80:D9:98:F7:F0:5B:9B:FF:92:CA
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 01976F99F79B24472960F3E915D923A44D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 18:00:50 +0000
Manifest this update: Sat 14 Jun 2025 18:00:50 +0000
Manifest next update: Sun 15 Jun 2025 18:00:50 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: mkgKDKzVz1ks4umDCnqUStjCQQLZ3IcTElJZURnBy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f7:9b:24:47:29:60:f3:e9:15:d9:23:a4:4d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Jun 14 18:00:50 2025 GMT
Not After : Jun 15 18:00:50 2025 GMT
Subject: CN=54f75233c2750425bc6680d998f7f05b9bff92ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:c2:6a:49:b7:17:17:a1:56:b4:46:b7:d3:
24:87:72:a0:88:aa:59:7b:01:09:ef:ee:6a:21:64:
1e:bc:1c:32:51:3f:86:6f:a5:46:92:a4:90:14:f0:
fe:a2:0c:fd:87:4f:e5:65:8d:93:69:33:6c:1c:48:
e7:ec:51:d3:4c:2d:75:63:2a:82:a9:be:f3:62:6e:
b7:e9:5e:7a:c6:67:52:76:7c:76:a7:5a:98:0b:94:
19:99:65:7a:11:a0:6d:64:c3:d6:40:b9:c8:ea:d7:
61:14:cd:eb:75:d4:0b:d0:92:d9:13:49:10:19:08:
52:79:da:29:78:84:f2:1a:c7:84:84:c7:a8:b6:20:
b7:86:ee:d4:a1:5b:49:f2:e2:af:97:45:6b:a4:3c:
8c:42:2b:3f:dc:b3:83:45:4e:15:93:91:cd:11:80:
ff:a8:75:2e:25:74:c7:d5:84:da:f4:0b:ba:b8:c8:
a6:09:3d:4b:6a:e7:f8:cc:87:a1:c8:be:4e:8f:4c:
bd:42:35:a1:05:74:6d:ec:9d:fe:3c:c3:6b:9f:04:
0e:e7:45:f0:de:d4:f3:ed:a3:ba:4a:cc:9b:f3:6e:
ab:0b:42:a3:09:b2:d3:e5:b2:b0:a3:dd:7d:0e:10:
c3:74:7c:37:93:97:31:77:e4:3a:3b:2a:f3:f1:df:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:52:33:C2:75:04:25:BC:66:80:D9:98:F7:F0:5B:9B:FF:92:CA
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:6b:50:96:da:2a:a8:0a:ac:68:91:02:8d:f9:2e:ca:0b:
79:64:ba:26:14:9a:35:e4:99:9d:26:e2:e5:b0:7c:64:be:48:
ec:3c:8c:3f:1e:9d:8b:f6:3b:f3:24:b2:8f:6b:ba:52:67:9f:
79:97:ea:d1:ac:1b:0f:9c:37:7f:1c:88:32:5f:b4:87:2f:83:
48:93:ee:88:a8:79:d1:08:25:ac:1a:16:40:df:f0:23:b8:c9:
c4:0d:f0:17:74:d8:90:d8:a1:f2:5f:3c:be:b7:4b:9d:30:4a:
cd:67:51:9f:82:14:19:37:76:d2:2e:fb:44:cd:5e:08:b7:c9:
83:43:63:3c:51:8f:22:cb:61:6c:ae:b4:38:75:f6:d6:c4:ee:
43:06:a7:21:27:ce:4f:76:e4:3f:b6:c2:90:c2:82:9e:bb:4f:
3b:3f:da:29:70:d7:51:35:94:7c:7a:06:6a:3f:bb:57:2b:6a:
17:5a:29:94:08:1e:43:ff:57:38:2b:cc:10:9b:3a:4e:6b:e2:
ea:96:1c:fd:6c:b7:8e:69:92:95:57:7b:a6:80:d5:fc:a0:8c:
3e:84:c4:68:c5:fd:9f:e8:9f:28:18:06:38:b3:92:20:be:50:
7e:3f:6a:c4:bc:f9:00:5f:a8:48:22:c4:c2:42:41:68:c3:06:
68:34:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:37:10 2025 by rpki-client