Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: qWzOqVmYkIt7DMZdbO71X1PRk0ohva3XwFPrYd5eUOE=
Subject key identifier: C0:E1:FD:D6:1F:44:54:50:5B:F7:01:38:01:80:09:83:72:EC:1C:1A
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 01976EF54CD24B3251AE6A699326DE26AC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:59 +0000
Manifest this update: Sat 14 Jun 2025 15:00:59 +0000
Manifest next update: Sun 15 Jun 2025 15:00:59 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: JPOyizATTVvkmxvaGiP53BtAGsFR83SASI6rpkAi8jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:4c:d2:4b:32:51:ae:6a:69:93:26:de:26:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Jun 14 15:00:59 2025 GMT
Not After : Jun 15 15:00:59 2025 GMT
Subject: CN=c0e1fdd61f4454505bf701380180098372ec1c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:3d:7a:37:3c:dc:b4:49:3c:2e:fb:e5:67:
51:33:0c:28:d6:bc:cc:f5:16:62:55:17:6b:59:3c:
77:0e:50:f6:f0:93:65:a4:9a:c2:a0:fa:62:72:29:
89:88:03:1d:45:b6:e5:40:fe:e3:58:cb:5e:80:83:
0c:3b:a3:cd:f2:3c:72:bc:9e:67:08:c1:da:0d:b6:
06:9c:df:11:b6:0a:94:35:05:ce:f9:ae:ef:cb:52:
ca:68:22:ca:1c:a5:a4:04:ab:11:64:73:c9:de:60:
b9:4a:42:86:9e:b3:c3:89:45:47:59:97:9f:07:44:
4a:87:6d:82:5b:6f:ce:39:1d:64:f4:7c:82:1c:21:
0c:43:68:1a:7c:f6:c1:30:f2:c0:4a:74:f0:19:dd:
c3:4b:a4:4f:8a:bb:3d:25:bd:33:83:3f:35:48:d2:
c2:d2:b6:fc:89:bd:84:0e:7f:a8:44:ce:5f:26:36:
3d:da:d7:3e:db:b0:47:92:63:88:91:72:21:76:5b:
2d:8f:04:b7:79:40:4b:59:36:37:13:d4:dc:87:86:
2c:c0:31:06:97:74:8c:66:b6:d1:08:28:33:71:ac:
24:17:98:2e:65:e1:21:8a:86:8b:33:4c:6f:42:a8:
a1:e5:3d:b1:76:09:e5:ed:01:f6:15:9f:97:75:93:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:FD:D6:1F:44:54:50:5B:F7:01:38:01:80:09:83:72:EC:1C:1A
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7f:89:70:d6:dd:d6:06:e2:4c:0e:d5:c2:9a:ec:e5:ae:e1:
ca:2d:89:66:23:cf:ef:33:ee:df:35:8c:a2:38:df:14:17:7e:
71:c2:43:c7:7b:6a:08:9c:e1:a4:1e:91:b9:6c:88:05:60:f7:
62:6b:7d:65:29:e8:18:49:1a:ee:3c:52:10:d7:cd:4c:1e:df:
ef:ae:44:c5:55:ed:d0:f6:e2:c3:6d:e1:3e:c9:e5:ab:98:39:
e4:ca:32:84:dc:8f:ce:c1:6f:fc:d2:7f:5b:a8:95:b7:f1:40:
79:5e:49:3a:a4:2f:33:76:1e:58:55:15:43:ed:05:d5:de:6d:
eb:6b:50:9d:56:23:f0:42:ae:28:f7:6f:32:7f:79:9d:74:a7:
64:ae:e1:d3:eb:10:4b:f1:ae:6a:0b:ce:28:68:21:0e:97:12:
5d:0d:a3:df:44:fe:d6:9f:5c:b5:ca:a5:96:b3:52:16:8b:73:
d2:17:16:aa:43:86:7d:23:9a:8f:34:47:0b:3c:f3:52:fb:29:
0a:d2:ad:79:5a:97:a0:1b:78:b1:bf:86:72:85:49:a0:b2:27:
3c:c3:23:50:4f:0b:34:1c:dd:c6:d0:ac:a1:e8:78:46:82:d8:
13:c9:15:7c:9f:c9:5d:0d:98:e5:e6:c2:2e:25:9e:7a:d6:2c:
0d:56:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:04:04 2025 by rpki-client