Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: gmTI1fz6/1jZnvrY4dML8ia5uQzvPZQrM/d2qV98a5c=
Subject key identifier: 09:53:7D:C5:EA:08:3B:58:F6:1E:CB:90:10:5C:7E:C4:8F:1A:36:8E
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 01976D7486294BA4136ED2B70E6C35368B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 0F62
Signing time: Sat 14 Jun 2025 08:00:42 +0000
Manifest this update: Sat 14 Jun 2025 08:00:42 +0000
Manifest next update: Sun 15 Jun 2025 08:00:42 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: RsHsQPsKYOx7lZNFZNRF2V25uu4ds1Y0f0OttNL+aGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:86:29:4b:a4:13:6e:d2:b7:0e:6c:35:36:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jun 14 08:00:42 2025 GMT
Not After : Jun 15 08:00:42 2025 GMT
Subject: CN=09537dc5ea083b58f61ecb90105c7ec48f1a368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:93:d3:ac:fb:9b:52:9e:d8:39:72:ae:b0:
c8:61:d9:ee:f7:dc:d9:63:0c:6f:1b:8e:6d:9d:3f:
fe:82:e8:47:87:d0:82:28:f8:ea:bd:52:2c:b5:88:
76:0e:4e:49:62:28:d8:b7:d8:d8:ad:da:ad:b4:72:
8b:20:0d:32:ea:4a:f3:92:6b:00:06:43:e1:f5:96:
d6:3b:a3:15:c1:dc:58:c9:e1:99:45:83:da:12:d4:
6c:26:13:84:e6:59:ee:28:98:6c:fa:36:e5:86:8c:
fe:94:0d:bb:27:d4:be:e1:4e:0d:0b:0f:39:c5:3b:
36:9b:64:ec:0d:b5:e3:60:09:2f:29:e8:7b:bc:3e:
0c:50:92:68:af:2e:bd:5f:04:93:eb:12:84:ba:9f:
f3:8a:ce:19:90:eb:0f:72:37:c7:da:d0:9b:68:fe:
81:c0:32:48:d9:3b:92:c5:6d:27:c9:36:13:40:5c:
d9:a7:df:35:9a:b7:c6:fd:91:88:29:50:ea:c3:63:
77:f2:f8:24:92:ef:11:62:59:9d:ff:b6:c4:18:bc:
1e:47:0d:d7:7d:f9:6a:0e:38:16:b4:c1:87:b4:af:
75:67:9a:21:5d:9c:ae:e1:ef:9e:2e:22:d8:2b:fc:
32:d6:a6:cf:32:1a:bf:49:1d:c2:12:2b:fb:d8:49:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:53:7D:C5:EA:08:3B:58:F6:1E:CB:90:10:5C:7E:C4:8F:1A:36:8E
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:18:8d:9e:3b:d3:19:ea:a9:2c:22:28:6a:17:81:63:37:40:
7c:1f:09:e5:ca:13:63:a2:b1:3d:41:e1:9d:ed:75:db:e4:62:
ae:8c:17:1f:a8:99:20:d0:1c:f1:00:a6:29:25:3b:d3:80:72:
d1:6e:05:42:45:e2:98:d5:85:9e:64:13:30:c7:5b:f3:ab:5e:
1b:27:3a:a8:41:6c:ba:c4:54:09:8c:be:67:d3:04:80:db:a1:
2e:d8:a0:5e:30:5e:de:9f:e2:50:4c:f4:85:49:a6:14:ef:98:
93:73:75:79:9b:66:e2:7b:b4:fa:01:e9:1b:df:f1:51:cb:f7:
6e:b6:8d:62:c5:a9:a3:b8:8a:8e:0b:24:84:0f:85:b5:e8:89:
01:e3:c6:07:5b:ed:78:bd:79:65:46:08:98:fe:ab:e0:33:ec:
42:d8:8c:15:eb:4d:c1:39:af:52:f0:8d:b7:14:36:58:d8:ef:
77:a6:2d:19:65:3e:91:ce:66:0c:2e:1d:06:40:f8:fe:72:17:
13:77:43:0f:8a:c9:95:e5:6b:b6:41:c3:32:95:9c:6d:57:3a:
94:cd:4b:68:28:87:8b:a2:fd:52:fd:b6:c5:4d:df:91:e9:33:
a5:f2:f2:83:0c:90:f3:df:7c:ac:c2:09:c5:04:cf:28:73:8f:
16:15:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:42 2025 by rpki-client