Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: ol0ysG0oMNFSnaGeb8TyifffMV9cx31+uz9Ilyy5fWU=
Subject key identifier: ED:D7:60:C5:A3:9C:50:DB:80:CB:AB:B2:D4:99:FA:05:44:6D:1F:7F
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019770076E85B990223D2464A0B934CECD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:24 +0000
Manifest this update: Sat 14 Jun 2025 20:00:24 +0000
Manifest next update: Sun 15 Jun 2025 20:00:24 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: ppw2aQb/xe3xeFmtVva2NF2TFl0NDzDOa+c8Hi8XZSI=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:6e:85:b9:90:22:3d:24:64:a0:b9:34:ce:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 14 20:00:24 2025 GMT
Not After : Jun 15 20:00:24 2025 GMT
Subject: CN=edd760c5a39c50db80cbabb2d499fa05446d1f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:63:ad:89:60:3d:24:06:7a:52:79:68:48:
16:da:37:cc:97:4f:b5:c6:78:c4:b2:9a:4e:90:b9:
9b:1a:87:d7:c8:ea:eb:2d:6b:19:57:85:aa:55:fc:
81:44:92:1f:9e:34:d9:51:e5:1a:97:a6:46:45:ab:
02:97:15:3b:1b:38:b2:a9:ad:31:20:64:8a:bb:28:
e0:14:79:bc:e8:78:3f:c0:d3:98:d3:b5:7b:d3:d3:
bb:9d:96:e2:7f:37:09:0a:e5:19:5b:ba:f6:5c:b7:
c3:d8:71:1c:2c:db:6e:df:68:8c:38:52:75:8e:bb:
de:75:b6:5d:05:6c:c4:29:bf:27:05:ce:15:53:88:
e5:53:34:24:0e:51:64:d2:02:f8:5d:90:91:5b:05:
7a:5d:b4:fc:1a:f8:9a:7b:0a:55:34:f5:fd:f2:e7:
30:ae:48:02:38:de:b4:67:f2:59:bb:08:41:37:95:
37:94:40:6b:85:1d:ed:51:91:7d:cc:95:55:2d:d9:
12:aa:e0:c6:57:33:0e:37:15:15:9c:8b:1b:aa:c4:
e2:f5:39:3c:6e:5b:57:c0:5d:7d:3e:53:4c:b3:8e:
3d:6b:45:41:62:b9:a9:e0:4a:57:5f:04:e0:29:8d:
bf:9d:fb:63:e6:03:0d:f2:9f:96:56:6d:b1:06:76:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:60:C5:A3:9C:50:DB:80:CB:AB:B2:D4:99:FA:05:44:6D:1F:7F
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:28:40:6c:b2:7c:94:8d:2d:ae:b3:cb:05:e0:50:c1:76:72:
7e:8e:a2:f2:b5:fc:ae:68:cb:ab:6a:a2:04:b2:19:33:86:55:
d8:ab:96:cc:89:8d:42:e9:43:c8:82:32:68:5c:85:c7:e4:74:
3d:22:f9:a3:98:15:4e:5c:ba:41:2e:4a:bd:18:88:81:20:0f:
09:a8:46:5d:e4:a1:86:7b:99:34:c2:21:30:0a:7d:c3:04:86:
d9:2e:75:02:77:15:7e:aa:65:39:f1:f0:54:71:19:12:74:72:
f9:6c:d3:1a:0e:16:d9:17:94:5b:4c:31:bb:b5:81:c4:b5:81:
77:af:d3:70:ac:40:1e:62:99:f0:c0:44:c0:c7:6f:00:a8:7c:
9e:c2:02:ec:f4:0f:cc:f3:64:8a:c4:1f:3d:c8:ea:e6:08:03:
de:ae:bf:ec:f4:43:90:59:13:2d:b2:94:03:69:84:2f:7e:49:
96:bc:51:17:b6:77:ea:bb:27:32:4f:67:d6:67:2a:3d:15:dd:
90:b6:81:77:5e:74:c9:bc:d2:3b:17:56:62:56:92:a0:6a:ef:
0c:9e:f5:a2:6b:a0:09:03:3c:07:1d:35:78:ee:d5:68:bf:dd:
16:27:75:8e:c0:df:7f:80:26:47:e2:e8:49:f2:89:1e:34:84:
b0:02:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:19:08 2025 by rpki-client