Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: 3nEu6O0gozbCZSpDSE4E8rKbka1qdtoRnizy8XoVI18=
Subject key identifier: BC:D1:6B:B6:C8:FB:95:1E:9D:56:FD:F9:FA:03:53:AC:FB:EE:73:8D
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 0197684E600B91CB48F961623341745F6E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:56 +0000
Manifest this update: Fri 13 Jun 2025 08:00:56 +0000
Manifest next update: Sat 14 Jun 2025 08:00:56 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: B6kUZv42VfoG3nA1449rLdaOWT5FmW3+7bhFdipIXiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:60:0b:91:cb:48:f9:61:62:33:41:74:5f:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jun 13 08:00:56 2025 GMT
Not After : Jun 14 08:00:56 2025 GMT
Subject: CN=bcd16bb6c8fb951e9d56fdf9fa0353acfbee738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:c5:d9:cd:94:50:7b:7d:b5:50:81:74:ed:
d7:9b:0d:09:67:cc:2a:11:22:e2:43:70:3a:e5:7e:
90:1c:e6:45:d9:14:e1:7d:b4:25:28:2a:60:b5:e1:
22:07:d5:8b:a3:84:c8:e2:e2:6e:67:4d:13:2c:57:
de:7d:42:00:cc:8c:cf:c1:be:fb:75:06:cd:72:d0:
49:2e:94:95:d0:08:fc:c6:58:e6:cc:e8:16:97:33:
93:07:cc:d8:dd:be:18:7d:d2:b5:77:4a:5e:ab:d4:
3c:32:7d:16:17:3d:cf:f3:2d:46:a7:dd:71:f3:bf:
32:f4:03:aa:e4:77:e2:c4:59:93:be:8a:b5:00:87:
9d:43:d7:1e:6e:b7:7f:90:f7:15:94:ed:aa:d0:d3:
88:8d:ce:8d:eb:89:d8:2e:80:6f:8d:32:8a:9e:ba:
47:6b:9c:df:4e:a3:21:a1:10:bd:8d:7b:19:01:f2:
12:4c:a5:43:6a:23:a8:fc:b9:22:5f:78:00:cd:e9:
05:c0:4b:b9:8e:b8:0d:97:60:cc:76:18:4e:10:22:
f2:ba:b1:53:d3:86:95:96:b8:0a:a1:46:e4:a0:a2:
9f:1d:13:0a:2e:ab:12:59:a6:79:d5:e2:3b:2c:7c:
82:25:ec:51:07:ae:6f:36:a0:e5:d4:bc:f5:36:d1:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:6B:B6:C8:FB:95:1E:9D:56:FD:F9:FA:03:53:AC:FB:EE:73:8D
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ef:35:45:7c:df:5f:98:97:d5:41:08:7a:5d:0f:0d:71:ff:
bd:c3:1f:4f:be:c5:f5:52:c3:ea:e4:ea:db:ce:7d:0a:74:06:
aa:f2:53:56:e9:7f:36:29:0f:26:af:ef:10:47:07:d9:7b:16:
07:32:fb:0e:14:9f:13:99:0b:03:fe:b9:84:f1:10:5e:db:86:
19:80:76:a7:26:84:73:70:c6:4f:3f:10:06:48:6a:fd:78:cf:
d8:1d:75:ac:9f:4a:d2:6b:79:7e:d5:e8:e2:8b:61:2b:21:84:
02:b2:24:03:8c:90:96:e3:7a:6f:da:c6:91:14:a2:6d:f8:c4:
7c:b4:b6:1b:5c:b1:ee:e2:90:17:a4:bd:b3:38:9a:b2:0d:55:
b2:92:16:3a:7b:94:42:fb:33:8d:34:56:ae:d6:a5:6b:3e:43:
e4:63:37:7c:10:29:68:95:7d:f8:e6:bc:68:5e:a3:74:40:de:
2b:62:b7:0a:bd:98:b2:40:29:9e:20:cf:e9:ff:af:93:dc:95:
69:67:d1:ce:6e:7f:fc:1e:1a:9f:fa:1f:3f:7d:2f:df:cb:45:
3b:8f:e9:2a:34:34:bf:92:9b:8c:d6:b6:8b:ab:9f:51:54:2f:
85:f2:ea:02:88:4b:b2:f3:37:12:02:3a:6f:85:6d:9e:9a:66:
b7:4b:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:57 2025 by rpki-client