Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: iqdO+VjHbeFZ7mTjgRjIOWhXk4bojySTMtF8OBF3+PA=
Subject key identifier: 77:05:09:D7:71:BC:20:E7:0D:30:2B:33:0F:37:C5:BD:84:DC:A6:C6
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 01976D06E63BBC5C51382CAA625EFD4C433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 0527
Signing time: Sat 14 Jun 2025 06:00:57 +0000
Manifest this update: Sat 14 Jun 2025 06:00:57 +0000
Manifest next update: Sun 15 Jun 2025 06:00:57 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: /SmX+b+lz7DfNrD6a7axHc/ANAes1cXRV62kwdCoLIM=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e6:3b:bc:5c:51:38:2c:aa:62:5e:fd:4c:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Jun 14 06:00:57 2025 GMT
Not After : Jun 15 06:00:57 2025 GMT
Subject: CN=770509d771bc20e70d302b330f37c5bd84dca6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:dc:3a:c3:98:b9:f9:79:35:ff:be:65:ec:
23:2b:4e:99:ef:b3:bb:3d:d7:5d:2f:d1:13:78:c2:
77:bd:45:d5:d6:07:46:4a:20:d0:b3:75:d7:91:60:
03:62:44:a1:dc:97:ad:d0:a1:37:d7:c5:79:d3:2a:
4a:81:07:f3:10:a5:71:7a:98:63:c0:64:fc:76:eb:
15:7f:93:30:60:7a:50:ec:cb:b1:05:bc:28:66:29:
55:12:3b:68:9f:29:81:d7:04:37:2a:8e:67:a4:75:
0e:11:d8:1f:ef:c6:25:6f:31:c9:db:4b:6e:be:c6:
cf:93:9d:2a:7d:c0:34:de:35:1d:01:e0:be:fd:ee:
07:f6:04:d2:70:5c:e3:47:26:55:1d:97:b8:96:47:
81:a2:43:f7:df:20:6c:25:75:73:a8:ea:25:ba:30:
db:24:be:6a:d1:1f:a2:98:13:79:a1:88:e5:fc:14:
dd:96:25:4c:d7:f0:13:fe:ec:c1:5a:3a:77:10:76:
31:01:9c:ed:3f:15:db:2a:8b:9c:c2:43:b5:bc:64:
d6:2b:45:73:ab:4c:b7:a9:27:8b:40:d4:51:ce:ff:
40:b2:b0:e3:bc:ea:df:27:88:09:f3:fe:ff:ea:17:
71:93:8d:f6:c3:05:55:2a:68:05:cf:e3:c2:37:38:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:09:D7:71:BC:20:E7:0D:30:2B:33:0F:37:C5:BD:84:DC:A6:C6
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3a:c7:ad:f8:fd:65:7b:f6:1c:3b:b5:28:dc:34:b9:1b:1c:
cc:e5:93:a0:57:bd:f6:65:55:55:41:35:a2:e1:11:fd:16:d6:
a8:41:15:f2:cc:23:05:1a:dd:26:70:93:02:bd:fd:96:f8:eb:
ec:60:d4:d4:8d:a1:d4:37:29:01:d5:0e:9d:14:ae:8a:94:08:
7e:f1:4e:de:a7:2d:51:b5:c3:c2:e1:50:46:65:20:a7:77:a4:
f5:1a:ba:d2:92:26:23:4a:3c:8f:a1:f9:95:ca:84:3a:48:5c:
7d:69:96:59:41:22:46:25:e9:30:b2:d3:cb:ce:11:bb:24:29:
c2:3a:10:7c:72:32:d0:c7:c8:2c:8d:e0:7f:1b:0e:b9:55:8b:
3a:a0:75:b0:74:82:e3:f6:24:c9:d0:c9:94:28:f3:73:83:a9:
ba:f5:a4:6c:a2:a2:2a:d0:1c:f4:d0:46:94:08:7f:6e:ff:3a:
35:07:c4:21:4e:69:2f:c0:08:1d:4d:f8:ce:22:68:5d:46:7d:
05:50:ac:e1:06:97:2d:d1:7f:af:ce:90:dd:c0:67:32:8f:1b:
17:57:8f:45:c8:59:f2:2c:5b:a4:58:c7:5d:67:73:6d:4d:40:
a1:15:72:7c:91:42:c1:a1:eb:0c:71:03:29:52:e0:06:55:10:
27:0f:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:17 2025 by rpki-client