Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: Idz4BZ2/FSkrB6RxsHeXithbt7rwT2vKIejo/6eZqhQ=
Subject key identifier: 8D:7D:EC:1A:D3:4C:1D:DA:84:80:8B:B7:F3:2A:30:F9:A4:C7:79:24
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 019769612AF8AAF917F82B86641ABD1C9535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 124A
Signing time: Fri 13 Jun 2025 13:01:04 +0000
Manifest this update: Fri 13 Jun 2025 13:01:04 +0000
Manifest next update: Sat 14 Jun 2025 13:01:04 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: 7A6QW/sHnstzYSEptPjP1VwF+AfpVMutuzeVZ4zIAb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2a:f8:aa:f9:17:f8:2b:86:64:1a:bd:1c:95:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Jun 13 13:01:04 2025 GMT
Not After : Jun 14 13:01:04 2025 GMT
Subject: CN=8d7dec1ad34c1dda84808bb7f32a30f9a4c77924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:b1:26:f7:6a:94:79:4e:5c:34:ee:53:ef:
5f:6a:4d:9c:83:91:ba:49:bd:0b:3c:9d:3f:dc:c6:
88:e6:af:49:3e:31:3c:e8:3e:41:09:fd:3e:5b:79:
40:36:5f:33:0c:45:9a:64:d6:f5:79:b0:22:98:09:
a4:22:8c:c5:93:26:d8:96:64:cb:4c:a5:f2:aa:25:
5a:45:eb:7d:ba:2e:fd:28:6a:19:5a:82:f0:d0:df:
5c:df:0d:de:4f:90:f4:e9:9c:bb:78:13:ee:7f:fc:
3c:88:77:60:df:08:66:5a:6b:af:e0:fb:0e:65:99:
55:aa:bf:b3:08:f4:d5:1d:39:bf:3b:02:2f:25:50:
9f:24:48:ba:18:bc:27:55:73:97:db:56:28:07:4a:
07:af:72:37:27:cc:09:f9:f0:13:ff:f0:51:5e:0b:
52:e7:78:27:18:59:ba:6e:ac:f4:7e:52:24:4a:b0:
60:6f:6f:4e:c4:54:94:c3:07:80:1f:ba:ef:d6:2e:
86:5d:25:19:8a:fd:8e:23:50:c9:ed:59:63:58:33:
c9:62:a6:5c:34:df:7a:6a:c4:9e:64:23:44:f5:bd:
eb:3e:72:a4:20:af:22:14:31:dd:5c:96:77:5a:63:
a3:14:fe:fb:9d:1d:f4:84:7b:83:e7:34:d6:2a:48:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:EC:1A:D3:4C:1D:DA:84:80:8B:B7:F3:2A:30:F9:A4:C7:79:24
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:19:0d:93:fb:9f:4a:13:8f:49:fd:8e:f1:51:70:88:9f:
aa:29:dc:f5:ea:5c:c7:d9:0d:13:98:bf:8e:93:f0:e5:3e:45:
82:d4:78:f5:bd:3b:bc:c1:8f:64:5b:23:88:4c:15:ff:9d:d2:
dd:c1:df:4b:62:91:74:e5:85:4b:2b:66:03:db:81:f9:88:14:
c4:5b:7d:16:90:5f:c6:24:21:8e:d2:69:a2:98:a7:30:26:33:
f0:06:26:d1:77:28:aa:a2:59:4b:99:cd:c8:ee:8f:44:c4:e3:
ec:6e:88:80:45:c6:00:57:4f:61:f0:f4:4f:e4:57:00:4e:ad:
54:50:a9:8f:76:aa:16:42:d3:30:b9:4b:a1:81:9a:bb:52:8a:
46:b3:b5:42:4b:dc:86:83:08:43:f2:cc:bc:2b:1c:a7:bd:57:
e4:7a:c9:25:bc:69:9d:ea:43:72:78:81:72:b7:03:00:1a:00:
00:b5:9c:52:be:8d:75:ec:88:eb:b2:8c:6b:b6:e7:06:d0:1c:
a3:11:5e:f5:27:10:d0:9b:7e:2a:a2:6a:62:a8:cd:25:4a:1f:
4f:a4:d4:d5:6e:1e:26:db:6f:e3:ea:9b:0c:8b:fc:23:22:cc:
0d:d8:87:b9:ee:04:a3:e2:10:0d:8a:4e:ea:e1:7a:26:7b:24:
8b:00:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:25 2025 by rpki-client