Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: 7pCc1iG62WGQAtxbaSccMaP//4SkiUY9zwXcV2XmjSE=
Subject key identifier: 43:D0:24:B8:0A:58:29:AB:9D:64:E8:D0:1D:56:A9:5E:50:2E:A4:D4
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019768BBC476E2D4E8FF0B62730864A63BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 096C
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: cePvLfJCHvbWUK2TQohlvffvhREydiKOdHC+uxBIszw=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c4:76:e2:d4:e8:ff:0b:62:73:08:64:a6:3b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=43d024b80a5829ab9d64e8d01d56a95e502ea4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:36:45:3c:4e:5d:a2:59:02:27:81:71:8e:
86:2d:ab:58:6e:75:c1:fe:91:98:16:9b:67:91:99:
be:90:9a:d3:64:73:63:46:fb:c6:7b:bf:af:f8:fe:
85:40:0c:ae:e5:01:f6:70:d5:bf:9a:41:38:cb:0a:
20:11:7c:e3:c0:07:a1:83:d2:db:49:05:42:e2:03:
23:45:2c:2a:6e:38:be:00:c7:54:16:b3:03:e1:06:
ae:75:16:cb:4c:69:27:99:e4:88:4f:bc:c7:1d:9c:
84:d6:17:88:d9:c7:b2:be:8c:d8:50:e8:93:4e:90:
9a:b8:ec:73:02:2a:60:3e:e5:93:07:78:c5:02:98:
28:15:95:07:37:d9:10:de:5b:75:3f:4a:27:50:ef:
51:50:9e:9a:cf:88:56:9e:54:2f:22:d3:fc:b1:f1:
93:0f:99:70:59:16:f8:bc:5e:29:3d:92:be:cd:31:
28:74:cc:c7:26:0d:20:0d:8b:ca:e9:60:26:97:14:
87:fd:c7:d4:20:f5:ce:21:35:96:09:8e:b6:8e:32:
74:86:cf:21:c2:92:58:d1:be:07:17:94:3b:f3:d8:
bc:de:60:85:75:af:f7:23:73:4b:c2:de:bb:9b:6f:
aa:dc:99:d2:96:5e:38:70:b0:1f:65:d9:c6:80:1f:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:24:B8:0A:58:29:AB:9D:64:E8:D0:1D:56:A9:5E:50:2E:A4:D4
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6f:5a:61:c2:52:a7:ef:0a:b3:8d:58:a2:83:4a:ee:f1:d4:
aa:fa:05:a5:89:22:fa:4c:bd:50:50:9f:a9:45:65:b0:49:a1:
2c:e0:08:50:c9:1a:ea:37:4d:dc:8d:ae:9c:cf:2c:8f:98:bf:
27:e4:e4:a6:d1:04:69:63:01:f3:25:8d:6b:c0:1a:b4:eb:c5:
8a:5f:62:c6:60:96:aa:58:c0:70:70:1a:b7:8a:fa:22:ef:46:
83:93:23:e5:f8:a2:e9:34:9e:69:ea:88:07:dc:ee:b0:29:9c:
06:11:20:67:0d:3b:e0:02:02:2b:e0:0f:1c:72:b3:f6:77:4e:
38:88:8a:93:f8:39:db:59:9b:3e:23:0a:e9:12:91:15:14:e4:
75:c6:12:39:1a:2f:00:ea:e3:a2:84:15:95:0f:28:77:bb:f5:
12:ac:0a:de:ff:eb:36:3b:11:b4:3f:c4:95:87:1c:7f:6e:20:
69:3a:62:b5:0d:6c:ca:3f:7a:8e:fe:ad:57:94:96:90:84:63:
33:67:b9:22:fd:50:57:53:b3:80:2b:fa:5a:02:d3:3b:8f:ca:
4e:f4:21:bb:79:0a:30:32:75:cc:a2:f3:74:46:f6:96:e1:a7:
69:21:e1:20:60:a4:d5:52:52:5a:8b:02:77:f9:d9:58:d6:23:
33:ab:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:24 2025 by rpki-client