Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: zDFExHfj0anruAXlqg9g0FEg29dMkpsVsLGqLj8f+bI=
Subject key identifier: 66:0D:63:E6:36:D4:90:5B:90:75:F2:8F:CA:EC:6F:D1:78:13:B1:D4
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019780FBD72D2645752796CC1C4625FA142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0F05
Signing time: Wed 18 Jun 2025 03:01:17 +0000
Manifest this update: Wed 18 Jun 2025 03:01:17 +0000
Manifest next update: Thu 19 Jun 2025 03:01:17 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: rNy+OoLguCpquc7m/pfLHW55H6vpUw7+8OLSuNDaTZk=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:d7:2d:26:45:75:27:96:cc:1c:46:25:fa:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jun 18 03:01:17 2025 GMT
Not After : Jun 19 03:01:17 2025 GMT
Subject: CN=660d63e636d4905b9075f28fcaec6fd17813b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:00:84:31:31:df:32:69:95:bf:d2:75:6d:
ce:80:a4:99:0e:53:dd:9b:ae:75:f9:b9:5e:6d:3d:
6c:19:d2:47:7a:f7:36:69:1d:a0:c3:bf:76:00:bc:
2b:ef:16:cd:e1:69:e9:5d:fb:b8:fb:91:c2:93:e9:
e4:78:b2:d9:21:96:c2:27:e7:fa:10:52:01:9a:ab:
9f:e0:a6:07:c0:19:16:7f:8e:53:16:d3:da:54:fc:
7a:b1:f6:d6:9c:fe:57:2d:30:e7:7d:e2:cd:1b:ea:
e3:3e:81:1e:52:43:12:92:eb:55:cb:9e:a1:77:65:
b7:56:aa:97:42:42:e1:f0:9d:a0:14:ee:c7:05:cf:
28:e1:60:56:8d:5f:d6:26:68:b5:bf:e5:67:fc:e4:
c8:34:be:4d:c9:ae:1f:85:36:d0:1f:53:45:75:f7:
a4:26:1d:40:4b:97:66:c7:76:ec:28:44:17:4b:9a:
0d:09:e2:83:0b:65:6d:98:61:db:84:e5:fb:e8:32:
01:7e:9e:a5:f6:58:e1:d7:1e:e4:f5:9e:49:8e:f1:
99:f5:2f:b3:6f:1d:cd:ea:7a:d3:19:79:fb:0d:54:
86:0c:f2:68:42:c8:4f:d3:71:19:ab:82:9d:d6:ec:
66:c7:96:71:9a:c0:84:c9:ec:40:92:ac:93:f6:bb:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:63:E6:36:D4:90:5B:90:75:F2:8F:CA:EC:6F:D1:78:13:B1:D4
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4e:ae:14:05:56:21:dc:10:1f:56:71:b2:b2:e3:e9:e0:ca:
47:70:16:3c:28:08:35:24:d1:12:64:51:1e:4a:5b:e9:de:7e:
68:a2:c1:0a:da:f3:94:26:3c:a8:86:1d:fe:a3:5f:d2:87:ad:
4e:0d:0f:fd:b6:37:93:16:1b:d9:8b:3f:4c:83:c8:8e:f2:30:
05:30:3a:54:b1:b2:a2:52:2b:ab:7a:f1:08:a0:44:d7:13:25:
2a:11:00:db:fa:95:68:6a:43:d0:ed:8b:41:e6:0e:1f:e4:04:
89:c0:86:7c:d1:91:d6:6a:76:be:c2:56:4c:e8:e2:58:d1:7b:
2f:bb:41:62:c9:eb:9b:17:17:97:92:a2:2f:63:40:2e:a1:f0:
bc:9e:5b:94:4c:46:07:ef:0c:fa:81:db:20:cd:06:88:09:89:
df:98:b2:42:68:55:a9:89:a0:db:43:ce:09:f3:c1:fc:82:44:
72:4c:f6:13:95:cc:34:49:c0:04:7a:41:6e:ec:39:a3:63:84:
62:12:f1:78:19:50:4f:17:9f:55:8c:b4:e4:c7:42:11:72:8f:
d1:e4:bc:0b:e5:79:67:25:5f:d7:ee:3b:0d:60:be:c5:ea:16:
2d:c8:23:e5:96:20:5d:b6:7e:59:ac:58:e4:0d:e0:8f:2f:fb:
3e:8d:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:03:54 2025 by rpki-client