Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: ypDKUG6EmmzLNNWh3zVwNrPPJMCNzz5bri1PWVLgA0g=
Subject key identifier: 67:EA:A9:92:18:31:91:67:4F:36:B9:E5:3F:9A:62:52:C2:3B:85:6D
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019777F83697FF7152FA7846EC1042133D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 128F
Signing time: Mon 16 Jun 2025 09:00:44 +0000
Manifest this update: Mon 16 Jun 2025 09:00:44 +0000
Manifest next update: Tue 17 Jun 2025 09:00:44 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: 0oV1dklQQhQZDIzXNc/9PMIkQhtB2NRHiOVOFdMZcXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:36:97:ff:71:52:fa:78:46:ec:10:42:13:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Jun 16 09:00:44 2025 GMT
Not After : Jun 17 09:00:44 2025 GMT
Subject: CN=67eaa992183191674f36b9e53f9a6252c23b856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:91:ab:4d:b4:c9:59:ed:ed:b6:e7:e4:d7:
6b:a3:44:95:0e:c7:a0:7b:dd:10:83:d6:e8:d2:4f:
a6:93:49:fb:70:1b:3a:a5:de:a9:44:7e:03:22:c2:
0b:46:22:e7:5f:aa:c4:2e:df:0e:4a:59:26:7f:e8:
0c:ea:d3:ad:41:17:1e:d3:5d:b6:82:b4:32:c2:cc:
e9:55:6b:92:f9:39:d0:83:5c:ac:0f:08:94:6d:28:
81:c2:ba:d6:ef:20:38:2b:87:d8:5c:ed:bf:3f:8c:
0d:5e:02:ee:a0:e6:30:63:18:31:d9:3d:18:40:d2:
c7:ad:6e:61:f8:e4:02:64:25:c9:ea:7d:34:35:4c:
de:e1:d9:9d:6d:28:0c:de:d0:d6:3a:e5:49:98:69:
72:3b:c0:0a:9f:78:42:4b:71:a1:5b:7f:de:28:ce:
c7:75:83:fb:be:50:ba:48:7c:3a:33:ea:1a:62:96:
68:cb:36:59:86:8f:d7:62:dc:6e:b4:68:25:fb:30:
43:45:60:ec:2a:b1:6e:76:0d:3d:9d:81:09:66:f6:
ff:34:1e:33:a4:87:27:f0:e0:66:d5:52:f8:d8:3b:
f3:fd:45:11:e2:69:5d:4c:e9:4a:4d:31:43:28:18:
e2:6c:13:79:74:3f:6e:ce:a5:ae:18:8a:e0:3d:76:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:A9:92:18:31:91:67:4F:36:B9:E5:3F:9A:62:52:C2:3B:85:6D
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:85:d0:0c:0d:d7:12:b0:a2:c0:79:32:0a:f2:17:e6:58:41:
48:16:c8:20:c2:18:a2:ec:be:41:da:83:63:1d:cd:46:13:77:
8b:72:ae:5b:a7:ca:7c:bb:47:26:79:a1:81:dc:cb:01:fd:6f:
1d:77:72:56:80:a0:1a:bc:36:85:c3:42:48:16:45:57:33:d6:
21:7d:d2:e9:72:3e:54:4a:7e:80:c6:c9:54:80:1f:00:7f:03:
be:c7:29:b5:0b:da:53:b2:11:63:12:47:0c:09:e5:4f:fc:18:
7d:01:3e:c7:cd:82:76:3d:5e:29:a4:7e:a9:5e:02:9a:84:db:
4b:22:24:5c:ec:cb:e1:6b:e2:1b:64:36:72:bc:81:f7:69:4c:
80:50:77:46:6b:60:47:10:85:8c:7e:ea:8d:33:d0:29:1f:cd:
50:07:37:c5:c1:3a:b4:0e:52:6f:ca:6f:03:ea:9a:1d:11:98:
7e:eb:f3:e8:e8:3b:8a:10:6b:f1:15:c6:79:6f:67:23:59:c5:
b4:e1:bc:a4:98:27:79:21:2f:27:33:de:54:80:fe:18:75:11:
19:35:95:94:2f:66:42:5b:16:70:14:98:c8:e6:c3:6a:51:4a:
8e:05:df:ca:7e:a9:fb:1c:d1:d7:79:75:5b:81:97:31:16:d2:
ea:14:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:16 2025 by rpki-client