Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: Xls8iL85T3T1vpZZFxewx0nmaG6iqfymjcY0WRo4pzU=
Subject key identifier: 3D:0C:11:44:C1:FF:6F:2D:F0:95:4C:4E:EB:8A:64:48:FE:24:73:6D
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 019769609C7B87DE62196E60286BAA2945C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:28 +0000
Manifest this update: Fri 13 Jun 2025 13:00:28 +0000
Manifest next update: Sat 14 Jun 2025 13:00:28 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: iMXLwhDLPWNS44YwYrdMNcwwiobOqARPNK4cNDraVv4=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:9c:7b:87:de:62:19:6e:60:28:6b:aa:29:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Jun 13 13:00:28 2025 GMT
Not After : Jun 14 13:00:28 2025 GMT
Subject: CN=3d0c1144c1ff6f2df0954c4eeb8a6448fe24736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:8d:a5:63:68:f6:67:a6:19:de:5f:63:96:
59:94:0a:32:08:85:c1:8b:4a:b9:52:42:cc:8d:59:
72:4b:3b:df:97:fe:de:32:5b:24:c9:24:5d:4e:8b:
9f:dc:d9:eb:61:ac:bd:57:3a:4a:c3:ca:54:92:15:
4f:27:d8:cb:36:b8:64:cf:e7:64:6a:e0:81:7e:36:
f1:8f:12:dc:48:ee:e5:6c:c1:b2:e2:aa:c6:9e:04:
e9:0b:3e:10:2d:b4:6f:a6:d9:1d:81:d5:5e:68:8b:
ac:55:70:98:1c:f4:9b:26:4d:1d:70:29:ef:06:50:
48:b5:ab:24:90:db:3e:2d:a2:88:07:71:a5:f5:72:
d5:d7:cb:ef:14:d3:13:af:cc:a7:f2:75:98:50:60:
48:d6:e2:7b:82:ec:13:af:82:a7:52:86:f1:3e:8a:
bd:f3:8e:71:f3:f4:be:22:62:70:c8:c6:5f:82:a0:
9a:d1:f4:7c:20:3e:19:d4:bf:fc:97:14:2a:41:3b:
91:88:9a:a5:8a:4f:4f:04:47:80:be:fe:87:5a:56:
7f:eb:44:ca:e7:d7:66:21:b1:6c:b1:0d:d1:6e:3d:
e0:22:b6:97:93:c8:c7:75:bd:62:76:cf:b4:56:10:
28:51:d7:64:ef:4a:fc:42:08:3e:00:c8:2f:11:8f:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:11:44:C1:FF:6F:2D:F0:95:4C:4E:EB:8A:64:48:FE:24:73:6D
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e4:db:98:5e:bf:2d:da:13:f7:53:d0:f7:48:bb:a2:69:23:
89:a5:f3:d2:4b:73:ae:5c:ea:45:00:2e:6f:d7:74:82:82:50:
d0:b4:b4:c7:08:e5:a9:73:6c:a5:43:94:11:a1:64:7e:a6:11:
f4:7c:22:49:56:78:43:24:3a:06:b3:0e:d3:0b:64:d3:26:41:
a0:b3:ae:ac:f7:73:49:e8:20:57:88:48:88:03:b2:3c:08:d2:
d0:56:af:f6:ce:2f:d6:61:bb:d6:7d:b6:1f:8d:90:01:d0:d4:
10:ef:bc:27:ef:70:2a:2e:66:f8:ca:49:b7:fb:c8:c2:9d:9e:
1c:95:47:fd:bd:e0:c0:fd:0e:bd:46:68:77:88:13:98:71:c7:
12:d5:74:e4:d0:10:b0:c1:b1:d1:66:19:ec:d2:90:21:c2:b2:
9e:8d:f1:db:4b:f1:94:c7:59:0b:90:99:28:bd:c6:0e:cd:e8:
64:45:88:12:d4:5c:53:e9:7a:da:17:e3:27:41:56:7b:cc:e4:
1e:06:3c:27:88:9c:2d:af:45:c4:d1:1e:20:fd:5e:7a:4a:88:
9e:fd:06:2d:e0:74:80:58:6d:fd:f2:1d:1c:49:c1:b3:f4:0a:
bd:d2:c0:aa:87:2c:c2:d1:0c:f6:0f:4f:62:88:cc:a4:b8:0c:
82:35:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:50 2025 by rpki-client