Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: TvlJme1dgVyMifxKrX/2pth+SspS/2P9BCWRu/qiZb8=
Subject key identifier: F4:E0:7F:C9:8F:D4:3A:42:28:A2:08:A9:47:62:C9:16:17:CF:E8:72
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 01976FD0D58E9716937152ADC1B7B10F87D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 19:00:46 +0000
Manifest this update: Sat 14 Jun 2025 19:00:46 +0000
Manifest next update: Sun 15 Jun 2025 19:00:46 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: f4RihEz1w66Gl+Ku6MIhGv7XPVxfQPuP+ouvU/EVazA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d5:8e:97:16:93:71:52:ad:c1:b7:b1:0f:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Jun 14 19:00:46 2025 GMT
Not After : Jun 15 19:00:46 2025 GMT
Subject: CN=f4e07fc98fd43a4228a208a94762c91617cfe872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:a9:28:84:dc:33:8a:0e:0a:33:fe:23:da:
f0:c4:ca:ff:bd:e1:62:f6:a7:a0:99:2b:06:7e:4d:
1f:e8:c5:5d:c5:85:b6:e8:c4:34:e9:97:d2:29:c8:
a1:15:ff:fc:a1:69:fd:1e:9e:7f:64:be:4c:58:b7:
6a:e1:29:02:b1:92:d7:e9:30:1c:40:05:c4:fb:c8:
62:54:97:be:21:2a:cb:58:20:de:5a:1a:e9:99:26:
6d:82:e9:97:c6:50:49:58:e9:03:c5:00:54:ab:70:
c0:20:96:e3:ae:d5:bd:5b:8e:f8:bc:78:73:29:86:
83:d0:5a:04:b8:d1:22:0f:5f:24:26:4c:7a:aa:ea:
1c:4f:50:49:cd:53:fb:ea:6a:33:01:82:a1:66:09:
c7:10:4b:53:30:5f:6e:9c:05:33:d9:b7:2d:88:10:
42:1c:cf:70:0e:76:79:84:c0:73:4d:86:12:f6:c9:
26:77:72:e1:6d:90:69:de:91:85:91:d3:42:52:43:
ae:11:2b:f3:d2:3d:71:5f:6e:56:f5:c3:d8:9e:f0:
34:78:02:f8:1c:98:43:68:ff:73:7e:9b:b4:6f:ed:
b9:79:40:1e:40:61:1c:08:a4:20:54:0e:bb:2e:ee:
fd:8d:94:db:53:48:4e:33:41:2a:1e:dd:ec:7a:45:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:7F:C9:8F:D4:3A:42:28:A2:08:A9:47:62:C9:16:17:CF:E8:72
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:bf:40:5b:f8:23:17:11:50:40:3c:6f:86:4c:d4:aa:5a:
10:28:02:76:b0:b5:78:97:c8:dd:cf:bc:6d:ff:22:bd:4d:e8:
ff:fe:42:05:d0:a7:8f:8a:f2:e1:20:9b:9d:84:0b:bf:69:55:
f3:19:21:e9:a1:75:88:34:0f:cb:c2:cd:5a:c8:7b:ae:96:0f:
16:d0:e9:ea:b5:33:79:64:fb:ec:8c:1a:9b:63:b5:b4:e3:c4:
75:a7:5f:dd:d8:cd:63:ce:21:4f:ae:21:e7:41:26:38:92:a9:
b4:0f:a9:79:fd:16:5a:d9:7f:05:5c:b4:9b:bf:2a:e1:b5:e5:
34:1c:8d:66:94:b7:96:92:ff:1e:d5:78:b5:16:08:4d:fb:05:
90:44:8a:af:0f:73:be:3a:c1:06:a0:a9:66:18:26:a1:f7:8a:
4d:2b:0b:7a:03:14:91:52:43:88:a6:be:cf:4d:22:30:1e:ff:
df:7e:87:b4:02:69:62:c8:fe:2d:b3:05:bf:cd:ff:0b:05:15:
2a:ff:f1:af:f8:69:57:8f:75:1b:73:73:75:46:35:1d:ea:e6:
58:f6:92:12:10:92:c8:7e:cc:c1:6d:2b:b5:9d:bc:cd:8c:53:
2d:f6:a7:a3:23:8c:3b:6d:e3:22:09:ee:f6:20:1e:d5:ff:51:
ba:df:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:10:53 2025 by rpki-client