Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: ZFp9AwOzLG3lrbmU+UA5UFAyJI7W6V9dwER9baqDn6Y=
Subject key identifier: 5B:9A:E4:34:63:91:A7:28:94:09:BA:5A:9F:13:31:06:63:06:8A:69
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 019778D42D12C98071A96EDDC4BB0912CCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 13:01:00 +0000
Manifest this update: Mon 16 Jun 2025 13:01:00 +0000
Manifest next update: Tue 17 Jun 2025 13:01:00 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: BtefGR0u1I2DWvTYTR0u6os6N6p59gRUGdmGgeu41fo=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:2d:12:c9:80:71:a9:6e:dd:c4:bb:09:12:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Jun 16 13:01:00 2025 GMT
Not After : Jun 17 13:01:00 2025 GMT
Subject: CN=5b9ae4346391a7289409ba5a9f13310663068a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:b6:c3:4c:76:10:de:52:ae:90:5b:b1:5e:
ea:92:70:da:82:c7:9b:37:0e:ad:6b:99:b7:78:a9:
92:97:f4:38:2a:7f:e3:4a:8f:db:79:51:0c:7b:9e:
95:8b:62:b0:16:ed:8b:a4:59:fd:b9:c2:22:64:a4:
50:b4:ee:58:24:d7:a4:83:6c:db:70:ed:4a:3e:9f:
e2:14:c5:6b:c2:11:48:cc:e7:c7:15:49:34:99:24:
10:73:55:e1:d8:f3:79:10:32:bb:03:9d:7b:ba:03:
85:31:73:37:22:ea:72:f1:40:f5:8d:66:77:75:c1:
5d:13:b8:84:f8:ce:76:fa:51:cc:32:6f:c6:1a:88:
69:51:44:67:9b:ea:4b:5a:74:a4:77:f6:23:49:b8:
c8:41:f3:2a:9e:38:d7:a0:e2:5f:56:34:c1:88:9d:
10:77:60:47:fd:5e:cf:26:7f:b6:56:41:eb:b4:5e:
2e:bf:ca:2a:b5:31:d9:c3:54:76:82:53:95:8b:d1:
78:f8:b6:32:dc:de:f4:33:39:36:a9:92:94:c4:78:
72:45:be:2f:05:dc:06:03:6e:03:4e:a2:81:94:9b:
d5:03:5d:71:af:5e:db:2e:a3:27:bb:90:0d:4d:c5:
ae:9c:2f:fb:56:07:68:02:9b:59:84:ea:1a:22:df:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:E4:34:63:91:A7:28:94:09:BA:5A:9F:13:31:06:63:06:8A:69
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:f8:87:82:b3:65:46:f1:b3:36:12:85:34:4b:4d:08:63:
84:1f:5f:f6:07:1a:b0:0e:bf:34:7c:7c:5c:6b:3b:36:74:3a:
d1:6b:4a:aa:de:0d:ee:d8:72:26:38:a3:18:cb:d6:9d:33:ba:
89:f5:a4:9f:d0:0d:e3:60:9a:a0:40:c1:e9:5e:2a:ec:16:d7:
21:f6:e3:76:f8:9f:30:ee:56:d8:70:93:45:d3:7c:5e:91:51:
84:65:10:ed:ce:a1:47:58:08:e7:8f:06:3c:f5:7e:76:94:d9:
8d:a7:e7:cb:fb:ca:67:82:01:fb:8e:99:2a:ba:cd:0b:30:b3:
f6:e3:af:bf:db:25:b6:7d:d8:c6:73:05:3e:d0:f9:7c:a3:54:
9d:bd:fb:26:f8:c5:73:8d:61:24:db:79:38:ac:bc:08:1c:6a:
3f:69:cf:2b:07:ee:0f:0b:de:43:b2:80:05:86:85:10:41:dd:
bd:00:1d:2f:35:69:fd:e8:31:f8:3d:87:a8:31:15:1f:18:89:
a1:09:47:b4:da:63:ec:00:2d:da:db:73:67:62:1b:f1:38:ad:
6a:c3:4a:60:b0:90:52:93:b6:ef:2b:ec:8a:4a:26:35:b1:50:
1e:c1:23:7e:a9:ae:72:ba:3b:8c:86:bf:00:82:c7:fa:02:d9:
0b:63:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:23:47 2025 by rpki-client