Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: 7SA0+Gm+b0xlM0VSljm/dvyg5/ksrmqEFeE/zGsc+aY=
Subject key identifier: 84:7A:43:16:AB:51:C6:F7:BF:DF:CE:A4:74:29:41:A9:2B:8B:A8:F8
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 01976D3D381F72DA438C0971163D5F3980BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 14B5
Signing time: Sat 14 Jun 2025 07:00:17 +0000
Manifest this update: Sat 14 Jun 2025 07:00:17 +0000
Manifest next update: Sun 15 Jun 2025 07:00:17 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: ENeGJnf1mWO4C8KSBAe8utmEPut4eE6L5cZP+/U0WBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:38:1f:72:da:43:8c:09:71:16:3d:5f:39:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Jun 14 07:00:17 2025 GMT
Not After : Jun 15 07:00:17 2025 GMT
Subject: CN=847a4316ab51c6f7bfdfcea4742941a92b8ba8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:1f:95:4c:c7:09:27:95:91:e5:6f:b4:aa:
df:31:dc:b1:22:9f:69:89:d0:a2:02:89:92:4e:8a:
cc:1b:cb:0d:d7:fe:22:d6:d9:bc:41:35:6f:5b:80:
93:bc:d4:af:e9:c9:09:67:28:1d:e9:39:29:52:a1:
82:c1:04:2a:19:55:26:37:52:49:52:00:e6:a7:5e:
9f:0a:16:78:13:0c:52:97:2f:70:7f:d8:40:0e:1d:
49:65:b8:8e:58:a2:6a:2d:67:65:72:f9:a9:80:f1:
f4:f5:f5:6b:df:c6:24:6c:ea:9a:0b:d0:67:67:f9:
7b:1d:9f:29:9c:fc:d5:21:b2:b6:6d:eb:87:63:95:
61:b4:98:5d:65:4b:d7:36:32:0e:c7:8f:bb:a1:08:
81:d3:bd:ef:11:92:b1:ec:73:50:00:63:46:89:2a:
ad:c2:93:2d:65:51:4d:7b:21:a0:8f:35:e4:48:b0:
01:a0:aa:fd:25:36:46:e4:7e:8c:73:27:41:2a:a1:
02:55:04:93:c6:ac:f7:27:f1:92:b2:ea:74:00:f1:
c1:1a:11:8c:ed:ff:1f:08:75:18:be:16:68:4e:f2:
4f:b7:a1:62:f2:c5:75:1f:5b:84:3b:f0:b1:10:f6:
c1:94:21:b6:40:d8:cf:97:93:21:a2:c8:c5:89:29:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:43:16:AB:51:C6:F7:BF:DF:CE:A4:74:29:41:A9:2B:8B:A8:F8
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ff:f2:3c:5e:51:1d:29:46:6d:ef:e2:37:a6:26:7d:4c:98:
94:46:ad:68:1f:d8:ff:c6:45:99:f2:f9:78:73:2e:4f:25:1e:
2c:be:64:4e:41:78:f0:57:9b:d8:3e:12:f9:45:ea:2a:cc:87:
f7:f0:b2:da:a1:08:9e:a4:7e:1d:19:4e:b4:ae:ee:0d:76:e4:
8c:c9:a3:0b:92:93:98:1b:49:e3:c4:94:4c:3c:5d:d0:13:85:
b9:eb:fb:cc:0c:67:59:1a:5c:c3:b2:57:1a:68:34:66:b5:1d:
5d:5d:c1:ae:65:b6:f2:34:1e:92:6a:85:39:7e:49:f7:7e:9f:
1a:af:15:6e:86:d0:a2:00:27:3f:17:81:79:66:b7:06:1f:0c:
bc:2e:dd:03:ac:27:e9:d7:ce:4f:5d:40:94:98:ff:7c:b6:8d:
f9:0e:26:ff:ab:c3:73:ed:7c:cb:ed:b0:4d:47:a0:f4:89:6b:
0e:25:51:4a:37:17:b0:5c:af:0b:8e:c3:0f:48:78:f7:5d:bf:
72:b0:ec:1f:cc:ad:9d:02:a3:ef:59:a0:2d:26:18:30:78:80:
61:07:ee:80:2c:15:21:80:97:48:23:32:ae:8d:13:88:81:ce:
71:0e:5e:83:9d:23:97:10:7e:3c:15:1c:b1:b6:81:e5:46:b8:
db:c4:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:08 2025 by rpki-client