Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: aBLcg7MHoegz+hs+ubUhbSVsaILxnKnRIKoKa7GZuhk=
Subject key identifier: 1C:94:87:9A:17:18:F8:A6:5D:76:5C:7A:5D:34:FB:16:C5:02:2A:76
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01976BF3E6081DABC81E6471018D8DE5E99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 0341
Signing time: Sat 14 Jun 2025 01:00:35 +0000
Manifest this update: Sat 14 Jun 2025 01:00:35 +0000
Manifest next update: Sun 15 Jun 2025 01:00:35 +0000
Files and hashes: 1: 7kHtWJwf55jOxnVlDwQ_Pz_QbDo.roa (hash: 5xzI11cU+vDKS4SWJ2VW5NiWSSXP8uOI0oJRmaU/700=)
2: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (hash: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: EhIXcLl8kcFghelFljxqj0JOpwDWrFOhmwozSD5rudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:e6:08:1d:ab:c8:1e:64:71:01:8d:8d:e5:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Jun 14 01:00:35 2025 GMT
Not After : Jun 15 01:00:35 2025 GMT
Subject: CN=1c94879a1718f8a65d765c7a5d34fb16c5022a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:79:71:52:df:91:3a:0d:c0:5e:b6:d6:39:
f9:ff:34:d4:33:a1:ab:17:ab:a5:aa:88:b4:b1:ce:
32:94:2a:b2:6d:78:e0:15:14:9e:ae:bd:e1:84:d5:
87:94:89:2d:a4:17:34:c4:46:2e:95:3b:d1:f4:0b:
04:c0:8e:30:65:f2:55:39:67:ae:06:fc:29:b4:42:
26:c0:52:24:47:f4:10:f5:bd:a4:13:75:65:93:a2:
ea:f3:84:e4:71:a6:2c:f1:f9:a1:96:c0:83:8d:be:
77:50:2b:b6:d7:96:11:c1:4c:e2:37:db:b2:45:49:
c4:36:b9:f2:2e:c1:f7:59:17:32:27:45:e0:fe:ed:
e1:e0:61:82:f1:f9:fe:9a:80:d8:b9:04:2f:d4:32:
e3:8e:d5:f4:db:88:93:dd:9b:33:5a:25:a1:8d:39:
06:a5:f4:98:b7:d3:61:7d:c5:30:05:ff:83:d1:34:
19:38:e9:45:1f:38:09:20:2d:1c:d8:03:c8:94:00:
e3:b5:73:d0:a3:6d:fa:55:12:11:92:ef:0c:96:a8:
54:91:f7:6b:ca:4d:e1:5e:4c:44:37:0f:d4:fb:fd:
73:9f:e4:49:9f:e0:b1:0c:09:74:c8:55:7b:2f:ed:
b2:3b:51:c1:35:1d:62:d0:71:76:2d:f6:44:23:4c:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:87:9A:17:18:F8:A6:5D:76:5C:7A:5D:34:FB:16:C5:02:2A:76
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:59:db:87:4b:dd:61:b6:04:81:58:f9:c0:b7:0a:89:81:
44:42:57:8c:f5:31:54:e2:d9:3c:12:3d:76:25:86:7d:98:2d:
74:3e:23:ad:0a:d7:57:f0:26:ea:22:c7:39:9e:69:c6:d0:79:
43:56:7d:a1:10:5c:a6:01:d5:fc:77:a2:bb:b2:7c:03:b4:a7:
5c:fd:05:1e:0e:b6:aa:92:bc:36:fb:f9:b1:79:31:14:97:be:
62:8d:a7:88:2b:1a:e2:ea:d1:bf:e3:66:a2:4f:05:39:de:8b:
d5:35:d7:70:03:71:e5:75:ca:ec:91:8b:b6:6f:71:89:a2:72:
f9:cc:fb:75:e2:c4:42:5a:c3:b8:53:1d:cf:b3:67:96:fe:c4:
f8:c7:08:1d:f8:96:8b:d6:47:50:04:13:8c:0e:b7:fd:a0:e9:
4a:cd:3e:90:ee:8a:78:ef:e9:9e:06:4c:4c:dd:16:f8:d0:a8:
52:9f:3c:19:4b:bd:11:10:57:5c:e0:14:d5:6e:1d:14:16:af:
8e:be:5e:9b:a3:57:79:9e:46:da:66:67:23:1f:94:d9:f7:99:
3e:0a:61:e3:17:8d:da:f0:98:bb:17:9c:d3:80:1c:5a:e6:80:
4f:af:60:25:56:35:79:68:94:6b:9c:a2:38:83:24:5d:0e:15:
e7:6d:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:07 2025 by rpki-client