Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: ZHVqkk+NYXPKgxGS/9yHQyKE35jGEy4tf2CncbbWRgY=
Subject key identifier: FD:70:39:69:51:C8:30:3C:10:1A:8C:DB:B0:10:68:CC:B2:D5:04:94
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 01976EF4C7B4528148FBA6E2CCE27D0D7AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 11AD
Signing time: Sat 14 Jun 2025 15:00:24 +0000
Manifest this update: Sat 14 Jun 2025 15:00:24 +0000
Manifest next update: Sun 15 Jun 2025 15:00:24 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: ILHPuDATLodcsr9VilOlmZZf8e0tstokq6yugVnyfvg=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:c7:b4:52:81:48:fb:a6:e2:cc:e2:7d:0d:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Jun 14 15:00:24 2025 GMT
Not After : Jun 15 15:00:24 2025 GMT
Subject: CN=fd70396951c8303c101a8cdbb01068ccb2d50494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:3f:f4:ca:b2:69:08:3d:a0:f1:77:28:ac:
c8:12:07:7b:98:3d:38:4b:83:b7:5a:37:61:3d:3f:
70:a1:07:1d:24:89:fa:1c:4a:3f:57:22:31:1b:8e:
97:87:b9:bc:5d:19:19:f5:7f:cb:04:c4:67:cd:34:
4e:03:05:9a:29:0b:74:b6:40:50:c0:f3:d9:56:bb:
58:0f:a2:17:bf:7e:65:77:65:93:17:ce:31:38:d1:
b1:db:09:ea:d7:bb:72:0c:16:c0:78:e6:69:23:2c:
99:47:7c:91:a7:0a:f5:28:20:c1:d1:1f:cf:64:a0:
fb:9c:ae:12:83:52:92:46:d3:e1:16:e6:e7:6f:fb:
de:be:e4:8e:23:47:a0:1b:b7:c3:11:8e:65:27:49:
b0:85:9a:60:f7:af:a1:f2:cb:b3:77:18:9a:2d:83:
7b:26:88:f5:e5:e3:fc:f2:3d:c3:3e:10:c8:07:d0:
8c:48:d9:0f:2e:f5:96:6b:9e:e2:91:04:5d:41:b7:
09:1f:15:82:e7:35:58:54:a7:d0:de:d3:17:2f:e2:
69:25:92:bd:71:65:0b:b4:6b:52:0a:43:a0:07:42:
24:d0:31:21:ff:8d:6d:5e:2b:d5:d6:f9:aa:8e:c4:
61:45:92:31:47:d1:74:3e:6c:54:c7:c2:8d:cd:91:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:39:69:51:C8:30:3C:10:1A:8C:DB:B0:10:68:CC:B2:D5:04:94
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:98:50:b8:ba:b0:44:75:78:72:86:37:bf:25:87:de:03:
85:a7:79:f6:6a:65:d7:50:ec:8b:0a:2a:a5:ca:72:21:c3:66:
66:72:14:69:eb:63:81:ea:83:53:a8:ea:13:27:69:5c:92:23:
41:de:da:92:49:cb:6c:4f:ab:16:a5:44:7c:a4:b0:bc:78:5f:
0e:32:10:b9:90:8d:5f:d5:72:87:fe:6f:59:f1:30:28:ee:84:
e8:da:c8:a3:98:9f:fa:47:fe:93:55:3d:9b:b7:d0:3e:84:e4:
a8:28:74:5a:6b:57:01:2b:11:11:13:77:a9:57:97:34:7d:c2:
ce:45:48:b3:d2:8e:a1:ce:d5:5a:3b:f8:22:fc:78:d0:bf:28:
c6:f7:47:57:4e:97:82:fc:96:3b:cb:6f:ac:78:2f:74:b7:96:
42:04:9a:35:32:15:a8:83:34:11:13:c8:99:e3:00:ea:c7:f5:
63:e0:ec:24:14:66:bf:fb:8f:be:92:75:98:e6:89:c7:ff:b2:
d9:13:ec:dd:77:fb:2c:ec:68:22:86:2b:07:51:dc:65:83:f9:
e3:86:74:86:a0:2c:c1:b0:73:54:ac:53:48:ef:eb:f6:5c:3e:
37:f6:f9:e2:a4:19:d5:0d:f2:16:10:9b:40:db:33:83:d1:fb:
53:4c:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:31 2025 by rpki-client