Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: IUXE7SKrQSGuEatGraUthVAujp17vPNehQzQ+fDHYfM=
Subject key identifier: D6:97:A5:81:4E:2A:FF:0C:EA:B2:2E:8E:1C:01:08:C5:30:A6:98:51
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 01976F2CCDE306C13E7C94C61B8F5EC88E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:36 +0000
Manifest this update: Sat 14 Jun 2025 16:01:36 +0000
Manifest next update: Sun 15 Jun 2025 16:01:36 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: ieE8lhsxj723ucM3dWXjIxGCyVx0XjBcubhBs/EBnOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:cd:e3:06:c1:3e:7c:94:c6:1b:8f:5e:c8:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Jun 14 16:01:36 2025 GMT
Not After : Jun 15 16:01:36 2025 GMT
Subject: CN=d697a5814e2aff0ceab22e8e1c0108c530a69851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:f7:76:48:7f:d2:1d:4e:b0:fd:87:e1:85:
40:4a:81:f3:29:7c:97:b7:0f:92:0a:52:d0:52:e8:
10:10:c6:df:c4:15:b4:2f:85:45:be:78:04:02:bf:
f4:92:c2:96:56:c8:8b:b0:94:90:ec:ca:12:fe:69:
ed:e9:fc:5c:18:bc:18:4e:30:06:cc:fd:d9:23:27:
86:7c:76:6c:b0:d4:a3:53:d4:1f:89:54:78:c2:94:
a2:b6:cd:a4:bd:b8:aa:6d:68:d9:33:49:bc:e9:d7:
eb:98:ec:30:1b:51:59:6f:94:8d:67:48:b5:72:c2:
8a:10:cf:01:aa:18:00:db:9f:51:1c:ea:3f:ba:5b:
bd:62:b0:30:0a:52:eb:c6:75:9c:9d:e4:87:96:95:
ae:ae:48:bf:f5:dc:da:b9:d4:d9:83:b5:a3:c1:d0:
74:90:da:de:3e:2d:d7:66:59:37:47:05:75:ed:1b:
1b:99:b2:71:60:2b:4c:61:be:26:60:88:52:84:23:
cf:7f:96:88:f4:ef:35:ac:b0:f4:48:fa:c5:1a:a2:
f7:91:e4:ae:c5:a3:34:37:58:46:53:25:a4:1d:4f:
d9:c5:0e:23:ec:fe:4f:e2:1b:1e:da:61:76:f4:c7:
92:6c:48:29:4e:25:c5:d1:c7:c9:f5:75:3f:57:2b:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:A5:81:4E:2A:FF:0C:EA:B2:2E:8E:1C:01:08:C5:30:A6:98:51
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1d:df:77:f4:3e:c1:ed:6c:29:6b:2a:3e:84:66:5b:50:91:
4e:39:48:2e:62:07:e2:7a:78:c2:b5:31:45:15:ed:94:c8:64:
4e:aa:40:37:79:05:20:63:91:a7:fc:65:54:53:10:e0:ce:f7:
a6:69:2c:3c:dc:16:36:ec:fe:dd:09:91:43:3f:79:40:50:d9:
14:b5:da:bf:ac:ba:3d:bd:64:81:cd:62:c5:20:01:ca:78:dd:
90:20:13:f3:31:04:59:2c:75:1a:65:f7:90:a8:d9:9e:81:b6:
e4:b9:17:5f:b9:9e:dc:93:75:48:53:b9:62:78:c1:52:f6:d8:
59:77:da:e6:c4:1c:fd:eb:26:da:bc:d3:62:6d:a8:24:13:2c:
58:09:56:4d:e1:72:a1:5a:9b:01:bf:8d:ca:d0:f2:61:56:69:
2d:24:8d:f6:2a:b9:2d:cf:44:5e:0f:0d:19:3e:f6:f2:84:f1:
ae:c7:9b:cc:42:be:1a:fe:59:19:46:c1:21:07:eb:19:f6:f6:
51:88:f2:7d:dc:bc:2e:95:af:d7:a7:95:49:1d:12:93:67:84:
5c:c4:3d:96:ac:87:c8:7f:13:74:f3:1a:e3:6e:30:9e:63:95:
17:41:6d:cb:4b:cc:36:be:31:03:a8:77:fa:3a:62:50:25:ed:
6a:8a:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:46 2025 by rpki-client