Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: PXZt7NjFGqWjb4BzQEBE/FpXhmj4UrIJRt2UYEF2Q4M=
Subject key identifier: 69:26:AC:6C:E7:59:20:48:D1:82:9D:42:23:0C:25:9B:BE:07:1D:01
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 01977FE96AFEDCA0403CA74EE401EDF55646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 1500
Signing time: Tue 17 Jun 2025 22:01:33 +0000
Manifest this update: Tue 17 Jun 2025 22:01:33 +0000
Manifest next update: Wed 18 Jun 2025 22:01:33 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: Xef3MUExdodn13IACkNmg8FmaTj2Uuo9sLzlj7pLyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:6a:fe:dc:a0:40:3c:a7:4e:e4:01:ed:f5:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Jun 17 22:01:33 2025 GMT
Not After : Jun 18 22:01:33 2025 GMT
Subject: CN=6926ac6ce7592048d1829d42230c259bbe071d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:bf:31:88:eb:a2:38:6f:d0:ad:c2:23:db:
49:40:b5:c3:ec:71:9a:5c:22:b4:60:db:67:6b:0d:
ba:c0:a9:06:62:68:14:9c:af:4c:21:65:6f:da:c3:
84:2a:c5:1e:a3:ca:85:aa:b3:bd:35:fd:c2:49:af:
a1:c2:09:81:cb:91:f1:63:67:a1:a3:df:cd:60:2f:
ec:f9:74:38:38:8b:68:f7:da:84:82:23:3b:c6:2e:
33:f0:97:a4:43:86:d3:91:46:dd:a4:6b:28:a3:bf:
13:f2:14:72:b1:2d:00:49:e2:f9:48:86:bf:0c:79:
19:bf:0a:10:89:de:d0:f7:7c:d1:1d:05:98:a9:a8:
10:b3:db:69:1a:4d:c5:e8:90:a6:d0:97:35:0f:e1:
b4:38:34:03:83:f3:0d:eb:42:71:19:7e:b7:7b:9b:
0b:7e:b2:50:b9:f1:65:4e:b6:4f:9d:5b:d5:bb:d3:
e7:98:ab:f5:d0:9e:2a:d7:0e:2d:8e:c3:3d:3f:05:
98:64:8f:5c:39:db:86:70:3f:b2:ad:f1:1b:1b:21:
2f:42:f1:9c:b5:0a:94:69:0c:3a:52:2f:3e:03:72:
0c:27:f8:b8:8d:7c:72:3f:8b:06:50:fe:59:d0:31:
55:79:92:98:5d:27:04:97:49:a5:b8:35:67:b7:54:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:AC:6C:E7:59:20:48:D1:82:9D:42:23:0C:25:9B:BE:07:1D:01
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:46:9f:47:2f:fc:11:0e:df:a8:57:a5:c7:7e:30:c9:12:df:
e5:f1:07:bb:37:02:34:68:1b:b2:ff:45:e2:c6:39:fe:e1:e2:
19:04:37:72:17:e0:78:96:f7:dc:3a:22:9c:4b:c4:78:e9:2b:
c4:7f:3a:24:44:c4:99:27:0b:26:b1:15:9c:6d:6a:e0:72:30:
34:32:96:4e:90:fb:e9:f8:c6:b9:2e:e9:df:f6:26:66:d5:b9:
2f:2f:91:4b:c6:95:a9:ec:b5:5c:d4:be:45:4c:75:80:06:3c:
ea:1d:3c:f6:3e:0f:0d:8e:00:4e:bb:cd:a4:b5:02:0d:1e:3a:
58:a7:9c:6c:47:94:fb:82:28:c9:92:8c:a4:fe:1f:a1:c0:54:
13:5a:91:14:f6:92:f0:3d:37:8d:bf:97:db:0d:a4:bb:99:8b:
34:7c:13:08:94:a9:bb:cf:fc:45:55:50:b8:fe:76:17:e4:de:
76:e7:21:b0:71:6d:0e:48:fa:78:05:61:26:2a:c8:d6:76:c6:
89:f7:7b:65:b7:1a:ac:09:3f:dd:71:01:f3:a7:2f:cf:3f:54:
67:77:f8:8a:80:f2:cb:c5:9a:48:36:9e:c0:e6:b4:22:d8:70:
73:ba:24:c3:8a:90:62:63:d5:5c:46:f1:36:ff:78:cb:c0:3a:
e5:8d:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:36:35 2025 by rpki-client