Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: VXyYQF8k3l2vCRz82VUnPM3y01UB/cXBvIIpwWTP9eQ=
Subject key identifier: 2B:63:D8:D3:53:1F:64:FA:E1:97:5D:FD:34:FC:B2:C9:E4:49:21:B6
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0197790AD9F21F4D6802932A14DFB0BA45B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 14:00:43 +0000
Manifest this update: Mon 16 Jun 2025 14:00:43 +0000
Manifest next update: Tue 17 Jun 2025 14:00:43 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: DJjP+bXZmgmwezFXJC8576ZgHy05Y/AUSCHGY9IR+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:d9:f2:1f:4d:68:02:93:2a:14:df:b0:ba:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jun 16 14:00:43 2025 GMT
Not After : Jun 17 14:00:43 2025 GMT
Subject: CN=2b63d8d3531f64fae1975dfd34fcb2c9e44921b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:ad:9b:3a:3a:bb:33:43:7b:79:f8:cb:1a:
95:9f:0d:09:73:90:bd:13:6c:89:34:1d:ea:9c:8c:
57:22:7a:4e:3c:6e:b7:23:4a:7c:e4:47:fc:91:e6:
67:2d:fa:c0:59:51:3f:98:50:d4:1a:98:26:8b:b3:
f1:a5:c9:67:65:a3:4d:0e:29:88:a4:b9:5a:1a:ce:
9e:18:3c:4d:a2:68:8e:61:72:52:5c:cd:dd:d5:d2:
fc:1f:1d:25:17:77:32:f8:d7:35:b1:4e:71:22:76:
88:d8:74:0b:c7:f1:c1:05:05:18:28:43:4b:c6:0b:
75:56:00:65:b4:01:bc:fd:ab:96:3d:80:d9:43:e5:
6f:c5:62:48:b8:d8:f0:ab:04:2a:3f:17:9c:3a:57:
94:1c:5e:23:8b:b9:3e:7c:84:06:ab:0e:25:32:eb:
44:64:b5:85:1b:49:4f:bf:1d:7e:79:02:e8:b7:3e:
b2:38:1b:36:87:9d:d0:18:8e:3c:f4:03:91:da:3f:
7c:46:38:a3:8f:04:46:01:ec:7f:34:3a:a3:8f:2b:
5a:2c:0d:f7:32:2d:a5:97:b6:87:5a:5f:c1:07:7b:
c4:c8:89:1d:b4:42:2d:e4:e6:45:71:b2:67:bf:c9:
73:93:3b:8c:ad:1c:6f:5f:10:0a:fc:28:be:7d:32:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:D8:D3:53:1F:64:FA:E1:97:5D:FD:34:FC:B2:C9:E4:49:21:B6
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:c0:f3:57:49:5c:fd:a9:61:be:cb:99:0a:d0:f5:35:ad:
da:df:c4:f9:a8:06:73:be:6d:22:e0:15:1b:a1:b4:5e:6f:68:
fc:fa:45:75:e6:28:db:1f:16:8f:58:a6:99:dc:56:f8:9f:08:
ff:ac:36:88:1f:a9:69:d3:f2:51:fc:1c:55:7c:76:67:e2:af:
04:dd:d7:df:66:21:5c:f9:6d:02:36:43:62:15:73:02:88:d2:
b4:6c:ae:70:89:33:10:28:a8:45:ef:ab:95:46:11:0c:87:63:
a1:82:2e:c9:40:dd:00:d1:c1:f4:a9:94:ab:04:ff:4b:de:e4:
73:3a:b4:d0:25:b2:2e:48:01:63:70:e5:b2:ba:c0:67:91:d4:
23:a1:b1:1d:77:fe:d7:d4:ed:4b:62:b9:29:16:aa:20:14:2f:
1e:2a:6d:63:0f:70:5b:45:89:03:f6:ad:64:80:a5:04:ed:8a:
c0:c0:1b:e9:03:2e:e7:77:7c:25:b8:c9:83:e7:ed:9d:a9:14:
87:a0:1c:04:2f:8b:b0:aa:63:b0:5d:6c:86:a9:c2:f6:4f:37:
c4:1c:cd:95:e5:bc:a6:0c:e4:17:e4:97:a6:69:f0:bd:d3:8e:
98:53:32:f9:4c:19:97:9a:75:41:95:8e:d4:f1:29:b9:f4:be:
eb:ac:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:37:25 2025 by rpki-client