Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: 8J/IutxhCjaXoOA6oibscH/dpJtgdrFhNaSix9P8GAg=
Subject key identifier: 17:BE:F3:A5:DD:06:15:9B:D3:DA:0A:64:9F:EF:AF:91:55:8E:F4:BD
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 01976EBE17ACE9ED2F9A05434C1D87184162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0C70
Signing time: Sat 14 Jun 2025 14:00:41 +0000
Manifest this update: Sat 14 Jun 2025 14:00:41 +0000
Manifest next update: Sun 15 Jun 2025 14:00:41 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: Eh52YXmuM81um4HTggpfUc3O31yDqNC33nKezTLV2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:17:ac:e9:ed:2f:9a:05:43:4c:1d:87:18:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Jun 14 14:00:41 2025 GMT
Not After : Jun 15 14:00:41 2025 GMT
Subject: CN=17bef3a5dd06159bd3da0a649fefaf91558ef4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:8a:d4:94:4c:2d:ff:ad:2d:14:19:b3:34:
3b:d1:e8:d9:be:05:af:da:0c:e4:ff:69:a7:79:d2:
0e:7c:98:34:86:d4:d5:1a:d3:30:30:c3:05:d1:a2:
f8:2a:5f:fa:04:9b:f5:24:04:15:e9:61:a6:e7:68:
44:de:0e:00:e7:6e:b7:71:46:ef:1e:70:8f:eb:85:
6d:57:e2:d6:db:9e:60:38:d8:e1:e7:ef:df:a9:db:
56:11:8a:15:76:32:c6:c2:5c:88:ce:2e:0f:c5:71:
b2:34:cf:a8:5a:03:4b:74:08:f6:e3:ac:5e:5b:9a:
97:1a:7a:96:9a:ee:88:b3:13:01:e6:ff:ce:73:a2:
0e:f6:44:9b:01:a4:de:ce:74:a5:a0:9d:c6:36:a6:
88:ea:f9:f8:3c:f9:1c:84:b9:20:94:38:f6:59:35:
22:40:6e:af:1f:2d:aa:d7:60:9f:38:30:7c:ea:48:
cb:f5:e9:3b:4f:70:a1:7a:fe:90:51:ce:a8:80:7a:
ca:65:7f:ea:85:29:a7:d7:bf:8a:bb:3b:04:c1:d6:
e2:e9:2d:7f:cb:ca:e3:06:aa:fc:8d:9f:20:c1:8a:
d2:0e:12:a3:07:22:4a:a1:ec:80:50:b4:9b:0f:0d:
0a:cc:7f:55:59:91:96:e0:43:d1:65:7f:87:98:45:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:F3:A5:DD:06:15:9B:D3:DA:0A:64:9F:EF:AF:91:55:8E:F4:BD
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:fc:bf:1d:2a:d8:bd:8b:00:e4:d3:25:eb:c1:56:d1:6a:
c0:c5:1a:a6:57:b1:14:20:1b:38:68:4f:74:ef:d3:8a:88:33:
91:24:a9:8a:8d:f8:e7:d7:dd:09:c8:94:1b:ed:9d:7b:8e:6c:
99:5c:d8:03:22:cb:d0:3e:da:5b:1d:6a:7c:72:f5:26:bb:36:
f2:4a:9c:be:87:a8:37:c3:04:93:a8:2d:18:63:19:52:e4:d0:
ca:e4:f3:76:38:61:50:a9:de:39:5c:bd:37:7b:1c:1d:c2:0a:
49:5f:40:67:e8:c2:7d:22:e5:f2:3e:99:06:39:31:23:ee:e5:
b6:a7:ed:df:b8:eb:53:8e:4e:8f:2a:ea:90:c5:da:af:a6:11:
71:5f:80:12:59:52:d3:e9:42:0f:f9:b9:5c:53:77:83:91:8a:
b8:ac:cf:74:60:cb:12:47:63:66:a7:8b:4d:62:fd:90:ac:7b:
12:01:53:ef:67:a3:b5:f2:ed:0b:4a:5b:52:fa:4a:3a:f9:24:
49:75:4b:eb:5a:bd:a3:0a:d7:bd:5b:a7:76:f8:6c:8d:e0:0a:
8f:7f:cc:8b:08:52:2c:7f:09:75:3e:4a:83:4d:f2:2d:b2:c1:
dd:01:a4:2a:6d:d0:18:99:3c:88:31:3c:c6:af:50:1a:fc:33:
2f:e9:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:53:44 2025 by rpki-client