Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: YDFtJ1tbJn1WqD1b1o6zwPCO4SWyTT4ErrFkQ6Xet+k=
Subject key identifier: 8A:BA:27:CD:93:78:72:FE:68:CE:F0:1B:8E:54:08:1C:B7:96:45:24
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019780566900126A51B95026073B8EBB18B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 0FB9
Signing time: Wed 18 Jun 2025 00:00:35 +0000
Manifest this update: Wed 18 Jun 2025 00:00:35 +0000
Manifest next update: Thu 19 Jun 2025 00:00:35 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: uJMRFZvuogg+0i1lqKLi0fG/vahpEW4qazzgrVqwFpg=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:69:00:12:6a:51:b9:50:26:07:3b:8e:bb:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jun 18 00:00:35 2025 GMT
Not After : Jun 19 00:00:35 2025 GMT
Subject: CN=8aba27cd937872fe68cef01b8e54081cb7964524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:a5:f3:26:13:53:21:b4:68:43:63:16:8f:
f1:4c:80:f2:7f:ca:81:4c:21:67:f8:27:08:75:37:
ac:f4:b2:35:db:be:3b:a4:b0:32:c0:1e:80:69:ad:
c8:17:1c:a5:6f:23:97:7d:bb:ef:81:c6:43:cd:cb:
76:67:58:7e:ff:ea:31:9b:61:f4:01:eb:f6:79:7c:
9e:c2:83:64:0b:1b:87:d2:32:ef:13:6e:bd:e3:92:
be:67:77:85:e1:b6:f6:74:01:27:5a:df:01:49:d1:
26:06:0f:b1:68:4a:4c:0f:2e:26:39:6a:10:72:53:
33:6b:6e:83:3e:8c:a4:d6:7c:7b:93:06:85:b2:b7:
48:7f:4d:65:cf:94:29:e4:50:cf:a8:93:f0:f1:35:
25:18:90:2a:ba:75:3d:ad:27:19:94:a5:19:0d:14:
63:e5:44:4b:03:cd:35:97:a0:fd:fa:8f:8f:b6:ef:
9d:1c:fd:e4:84:7b:a2:eb:e9:81:9b:b2:9e:0d:9e:
e3:ee:e5:33:af:83:2d:53:85:81:4d:d1:52:97:2f:
81:0b:48:30:4e:92:05:a2:2f:e5:2b:89:f8:58:1c:
43:6d:96:8a:dd:f9:e0:36:20:77:1f:75:e9:31:66:
3b:ab:8a:26:b2:eb:7f:84:68:c6:36:f4:60:50:8f:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:27:CD:93:78:72:FE:68:CE:F0:1B:8E:54:08:1C:B7:96:45:24
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:21:cc:93:f0:69:a3:6d:5a:5f:34:86:1d:1c:4b:da:ed:a3:
d2:cc:9a:68:ac:35:3e:93:5b:57:20:07:97:a1:36:99:3f:5f:
be:00:da:d6:4d:07:6d:21:d9:c0:4d:20:22:99:80:be:64:d0:
fd:c5:4d:cc:c7:f2:e5:91:d3:37:7b:6c:68:2d:dc:8b:ee:83:
a1:21:b6:b3:05:7e:88:1b:c3:63:7f:05:dd:67:c4:cd:8e:da:
4b:88:1b:e4:28:1a:2d:fb:02:f9:25:57:94:e9:84:db:2c:06:
a1:0f:18:08:32:ec:34:f8:da:60:c0:08:55:ea:98:06:74:31:
ce:8f:27:81:c2:d6:57:c2:bd:5c:dc:aa:93:39:c2:c0:c1:df:
0d:d2:f7:6b:d7:11:99:2c:5f:d7:f1:29:c3:d9:17:9d:e5:6a:
32:f7:a2:e4:b1:56:5a:be:79:95:71:93:d7:d2:89:7c:e2:53:
f1:e9:2c:16:22:05:03:1c:1c:d9:ed:64:1a:7f:89:54:d4:be:
6b:70:33:6b:77:eb:af:b6:2c:b5:08:17:c6:0d:5c:f5:4f:05:
b4:78:46:f9:9f:18:ca:d3:93:ee:f6:bb:ec:04:74:9a:6e:41:
58:cc:fc:a6:6a:17:b1:19:8e:81:5f:3c:6b:07:c7:50:7e:56:
ca:bb:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:04:01 2025 by rpki-client