Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: SvWvcCVMvDqGId3B1JBPpvkvVnjOmn6RJm+tT6BChkU=
Subject key identifier: FF:0A:2B:9C:D4:8E:2A:F1:DE:16:74:5F:3C:46:7C:07:15:37:6F:B8
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019771BF0CC1022458DE44210758921E9A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 04B7
Signing time: Sun 15 Jun 2025 04:00:35 +0000
Manifest this update: Sun 15 Jun 2025 04:00:35 +0000
Manifest next update: Mon 16 Jun 2025 04:00:35 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: 27P3yXYUcTGk2yBcet/L93V9DMtX/zSi5+x+9onahQw=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:0c:c1:02:24:58:de:44:21:07:58:92:1e:9a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Jun 15 04:00:35 2025 GMT
Not After : Jun 16 04:00:35 2025 GMT
Subject: CN=ff0a2b9cd48e2af1de16745f3c467c0715376fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:55:ae:15:d8:57:83:8a:28:58:be:ac:e6:
d0:17:5c:89:fe:49:97:e7:f9:b4:78:54:bd:8f:a0:
fd:79:e0:6c:46:ee:7c:fe:49:3a:93:18:10:a5:61:
bc:9b:d5:31:c2:6d:7d:f8:a5:02:f2:5d:69:4b:76:
81:1d:8a:25:c7:8e:10:da:c4:d1:7a:e2:8e:cd:7b:
1e:22:97:a3:29:93:13:73:1c:c5:3e:9f:88:7a:7c:
2d:4e:c8:ec:c7:06:cc:97:0a:72:a1:24:50:32:b5:
13:72:f4:29:e2:28:76:8b:d5:23:d9:80:70:fd:4b:
3e:0c:ef:60:3c:0e:60:02:9f:22:2d:a0:8b:c1:29:
ca:52:65:05:24:64:ec:92:28:81:00:5e:98:52:70:
40:1f:fd:d4:6a:31:7a:1b:66:cf:90:db:0a:80:e9:
88:48:a3:89:6f:b0:05:5c:d8:83:6f:bf:71:ba:25:
d6:8d:8b:70:b3:bc:11:b4:80:dd:af:0e:0a:d7:1f:
37:1c:c9:e6:39:4e:4b:c8:3e:5b:3a:a0:d5:d5:89:
cf:cd:b3:db:0c:a8:ad:67:e0:d8:7b:97:a2:8e:9c:
b2:af:21:72:4d:04:84:cd:6a:c6:1d:20:01:f5:cf:
8e:85:57:d1:73:8e:4a:0e:f0:e0:bb:76:d2:e3:7b:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:2B:9C:D4:8E:2A:F1:DE:16:74:5F:3C:46:7C:07:15:37:6F:B8
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:f1:1e:e4:e6:62:42:c8:83:6b:e2:3f:84:4d:54:ba:15:
aa:05:47:ab:cb:62:82:9c:f4:21:89:f2:c3:be:8e:b7:74:09:
bd:a8:c6:c9:e4:b6:4b:80:68:e2:be:16:70:2f:62:ec:f4:4f:
68:1e:97:2d:3f:b6:a5:ec:40:60:05:c4:42:cb:ee:ef:ec:d1:
6c:34:d9:8c:42:f0:88:80:93:52:ee:c4:f3:34:27:68:dd:4f:
61:a2:55:d8:b7:0f:6f:44:f4:4b:bc:24:9b:a1:a1:08:cd:5f:
ea:fb:06:5d:21:04:f1:d9:25:cc:1a:2e:ef:98:83:19:e8:a4:
79:ac:47:8c:1d:1b:b3:bb:60:50:79:9e:df:72:63:fe:5f:5b:
73:02:51:59:2a:d1:29:4a:60:b2:75:35:27:66:b8:c0:ef:12:
fe:26:8f:0b:5f:c7:e6:5c:11:0f:44:1c:0d:02:e7:b2:aa:1d:
6b:aa:d5:7c:dc:a3:40:99:34:84:59:c5:f3:49:c5:cf:6a:20:
2a:47:50:f9:84:5d:a9:e9:b9:95:3c:08:0f:15:64:d5:3e:72:
8c:73:73:64:71:cf:c1:0e:c8:cd:89:b6:95:8c:a6:4a:ed:d0:
77:31:c8:b8:da:6d:17:eb:d7:9e:22:98:ca:70:77:f5:b6:ab:
c7:49:70:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:53 2025 by rpki-client