Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: 1822JMHxkD/7znL+BwRch2m5I+ctB42VIfm1Sh4uAzU=
Subject key identifier: 06:B1:6F:44:C8:57:A7:9C:FE:B3:FA:83:32:5A:E1:A4:06:7B:D1:ED
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01977CB09922B111B7412B9F11E45487E063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 159D
Signing time: Tue 17 Jun 2025 07:00:37 +0000
Manifest this update: Tue 17 Jun 2025 07:00:37 +0000
Manifest next update: Wed 18 Jun 2025 07:00:37 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 36HxdLnYxYHSjMWqNfDs/nJfj1ORuoSdZfTtLWU6pjU=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:99:22:b1:11:b7:41:2b:9f:11:e4:54:87:e0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jun 17 07:00:37 2025 GMT
Not After : Jun 18 07:00:37 2025 GMT
Subject: CN=06b16f44c857a79cfeb3fa83325ae1a4067bd1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:8e:2e:67:b2:5a:f9:63:60:05:ff:88:66:
59:bb:b4:95:fd:ec:7e:c5:cd:92:cf:1c:c8:f7:b4:
49:ee:e5:a1:87:73:f1:a6:22:d7:22:7c:d8:be:c9:
89:cf:f2:1a:fc:f6:84:2f:dc:60:fc:15:61:0d:45:
01:5c:02:43:83:2c:d0:aa:90:00:93:25:52:c8:75:
09:8e:bc:64:87:cc:82:1c:17:b7:1a:40:cc:a1:3a:
2e:c6:17:7d:8d:5f:33:b2:a4:4b:03:55:89:78:fa:
fc:bd:43:7d:01:90:f0:ec:bc:d0:b5:90:75:31:83:
76:20:22:ad:99:ae:45:71:9b:c8:be:fd:92:35:7b:
57:e0:12:83:8d:02:8d:a6:ec:a9:5a:85:63:b4:80:
2d:20:8b:6a:2f:71:2a:60:0c:37:8c:af:b2:4f:52:
63:8b:6c:49:ab:33:e6:c5:97:5c:8c:f2:b0:75:52:
e5:4b:75:a7:53:5c:93:10:86:6e:d5:44:9c:ef:1a:
5b:37:fb:44:95:a8:4b:7e:65:38:53:59:c8:16:79:
68:ed:4a:29:ee:a6:62:48:e3:a1:29:db:2e:4b:1c:
a1:bd:ac:ec:cb:88:66:d2:81:ed:5e:23:f9:65:39:
d5:5f:7e:d1:0d:65:4b:d0:65:7a:84:11:81:a5:49:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:6F:44:C8:57:A7:9C:FE:B3:FA:83:32:5A:E1:A4:06:7B:D1:ED
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f2:24:e3:9c:48:60:4f:9b:32:70:1d:2c:b6:5c:83:88:ab:
23:28:fd:8b:57:84:d9:d9:fa:26:df:75:f6:d7:38:c8:26:12:
19:70:de:3a:cf:13:d4:9e:e9:60:72:13:5c:ba:31:ff:b0:39:
dd:ae:b9:fe:70:6b:6a:71:52:96:46:d8:94:a6:15:a5:d3:34:
b6:63:a4:07:b9:fe:63:9f:be:32:fa:1b:f9:3c:1e:04:f3:23:
68:0a:c4:f1:78:79:41:6b:a1:b6:a6:23:1c:d7:f5:58:d3:a6:
a1:6b:81:cb:9c:63:8d:3c:bd:20:5d:59:55:c6:34:5c:3e:12:
7e:ae:14:ad:80:65:9f:4e:12:e1:1a:fb:a1:e2:66:25:d5:a3:
ed:d2:68:8a:b8:1f:de:3f:37:19:fe:98:1c:68:3f:b5:de:28:
ec:d0:8c:00:db:80:bb:fb:62:db:01:51:68:ad:3c:ec:11:d5:
c7:f0:23:86:6e:98:6e:b3:ce:22:23:64:3d:e0:93:ce:5f:b9:
47:f2:78:7b:f4:81:f6:14:b5:fd:98:fc:fd:22:fe:a7:82:f4:
2c:d5:a2:4a:e1:03:fa:26:2f:d8:a9:ef:94:c5:6f:94:41:77:
27:75:c0:a7:a8:67:ab:65:fa:a0:78:84:aa:d6:7a:3b:7b:a7:
78:43:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:50:15 2025 by rpki-client