Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: G45oZc84LtruXdeEZcbdpkNfijbzLBAB8kwWwQZl5hE=
Subject key identifier: 6D:70:A2:1A:41:DA:58:67:51:A2:74:35:BE:BA:0C:4B:71:5D:E7:4F
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 01976C625A1772A7A554ADD071EA146F2B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 03:01:14 +0000
Manifest this update: Sat 14 Jun 2025 03:01:14 +0000
Manifest next update: Sun 15 Jun 2025 03:01:14 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: KYENW3rpSnB1Q8M75UKju1zG2TNE5IIe45uuoTPm/qI=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:5a:17:72:a7:a5:54:ad:d0:71:ea:14:6f:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jun 14 03:01:14 2025 GMT
Not After : Jun 15 03:01:14 2025 GMT
Subject: CN=6d70a21a41da586751a27435beba0c4b715de74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:df:de:5a:3b:0c:99:b4:10:3a:bd:f5:fb:
9f:b3:62:82:12:3d:61:99:36:26:04:e0:3e:6c:37:
96:67:96:65:65:d9:93:66:fc:6d:9a:97:07:2c:76:
3c:c1:fe:04:d7:6c:b4:e7:0e:da:53:1a:b6:37:43:
ac:7a:17:e2:8b:a7:6e:6c:19:2c:fe:f6:ca:97:3e:
22:91:29:ec:7a:fb:f0:60:2f:17:42:a3:09:c9:b1:
58:90:75:f2:4b:c1:42:fc:33:63:ba:d1:76:92:06:
6d:b2:0d:10:cf:ea:a9:b1:1e:d1:00:1d:7d:be:d4:
53:ff:5a:69:3a:ed:3e:24:63:9a:66:a6:7b:48:9e:
4c:1b:75:58:08:40:7a:9e:9b:b6:9c:e5:fe:ba:23:
7f:ca:c4:8d:d3:2e:f8:ac:52:cc:91:7c:ee:61:4f:
89:f5:6b:46:cf:10:a4:73:bc:bb:c7:31:09:40:43:
e1:cd:af:60:99:7f:4c:10:f2:1f:d1:ef:52:9b:a5:
c1:82:57:74:68:0c:ea:2d:55:1a:c5:f0:fe:30:3b:
36:79:85:fa:ed:c4:de:c8:5e:0b:59:2e:73:f5:fb:
c0:df:3b:6e:0a:f3:53:2f:69:e1:f4:cc:6d:af:45:
d4:aa:77:ce:d8:f2:0d:35:03:cc:74:7c:ca:36:99:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:A2:1A:41:DA:58:67:51:A2:74:35:BE:BA:0C:4B:71:5D:E7:4F
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:42:de:7d:4b:79:52:6c:e6:34:fa:96:fa:1f:14:ed:a3:80:
8e:05:87:03:ac:08:08:0d:fb:e3:37:74:ad:f2:d9:2e:92:84:
66:d4:25:f1:2f:57:27:2d:14:c4:e3:91:c0:3b:33:6c:d6:0f:
65:39:1f:2b:88:17:6a:87:28:2c:d4:86:d9:a4:73:28:42:fb:
ec:cf:f4:cb:38:14:61:e6:c4:50:13:0c:e5:c1:ef:8d:8f:e3:
06:e9:33:bd:2d:56:6f:b1:20:91:0d:79:30:73:d4:2e:87:6b:
79:b1:4b:fe:77:a7:ff:40:52:86:a2:1f:c8:67:ad:1f:68:b3:
ad:cc:63:76:a8:6c:a4:45:7a:87:c3:0f:48:35:87:e2:23:92:
15:34:15:dc:ca:4a:34:7b:fc:75:3c:7d:42:46:89:ce:15:e2:
13:f1:8c:91:0a:84:14:ab:a0:c4:b1:8c:29:f9:23:d0:dd:f9:
0b:57:67:59:2c:bf:13:3a:fe:56:12:69:0a:ed:e4:d8:d4:cf:
3e:2c:c9:58:9c:0c:f7:8a:e8:f1:16:5a:8b:f8:30:21:19:e4:
89:6a:0b:20:71:01:5e:e0:75:50:2b:97:ef:2f:a0:4a:f5:34:
7d:22:60:c0:53:d5:64:cf:6c:75:e8:ba:00:48:09:1b:a7:04:
60:6b:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:37 2025 by rpki-client