Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: ejh45+Ia82xKFacy2WKHC2CS7rUk1l8TIcAtcdbVuoU=
Subject key identifier: 84:A2:02:4C:BA:AD:EA:89:2B:28:E7:9C:07:84:36:55:4A:7D:14:F2
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01976E19B461E35A2E33DA9F6B37E9A5E9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1314
Signing time: Sat 14 Jun 2025 11:01:07 +0000
Manifest this update: Sat 14 Jun 2025 11:01:07 +0000
Manifest next update: Sun 15 Jun 2025 11:01:07 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: pHpJmLLyrBLP3ZZiJDplTXUqZ62QSq46WQaGu44qrPI=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:b4:61:e3:5a:2e:33:da:9f:6b:37:e9:a5:e9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jun 14 11:01:07 2025 GMT
Not After : Jun 15 11:01:07 2025 GMT
Subject: CN=84a2024cbaadea892b28e79c078436554a7d14f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:de:11:88:56:d4:af:26:03:46:56:46:f5:
bd:e2:1e:ff:51:53:35:43:f8:a5:d4:10:e7:39:9d:
09:8b:09:44:5c:61:a8:64:a2:99:d4:e2:3f:3f:ef:
2e:aa:21:16:4c:57:6d:1b:6f:df:07:2a:6c:d4:1f:
ce:82:2f:c3:6a:56:b9:a7:10:09:56:44:2a:5f:43:
65:d2:4e:ab:c9:d8:1d:d9:d5:82:5f:4a:50:a4:df:
b4:ac:d7:67:50:18:34:8c:5e:44:bb:3e:c7:ab:83:
5d:10:f1:ad:70:3d:52:d9:f2:f2:e3:87:84:93:f7:
d2:6a:96:6a:b6:9d:28:52:69:01:ba:5e:17:35:4c:
69:25:f4:c4:ee:d6:cd:6a:9d:6c:e8:21:f6:da:a7:
df:ae:86:df:4b:22:db:bc:c7:bb:c9:f8:a8:76:52:
d7:e3:ae:6b:9f:01:4e:b5:52:85:92:6e:6b:b5:6e:
c9:27:90:f5:cb:8e:3d:87:08:68:87:eb:c1:69:46:
40:9a:ab:6d:cf:81:25:23:53:4d:34:56:39:02:2b:
09:af:94:c8:13:3c:2c:78:f8:17:13:56:fe:38:7b:
b0:7d:e9:57:2b:5d:ee:78:ea:9b:de:d8:e0:84:d4:
cb:31:e3:46:1a:c8:9a:38:46:11:b6:0e:42:88:1c:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:02:4C:BA:AD:EA:89:2B:28:E7:9C:07:84:36:55:4A:7D:14:F2
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:55:89:e6:7c:60:e6:8b:75:16:21:b1:be:81:1f:86:aa:
45:c3:e0:7b:81:5a:11:63:7d:7c:ae:6c:65:47:01:96:11:6f:
05:39:64:1e:b0:c3:a8:2b:17:1a:df:9f:ae:bb:c0:97:bc:f6:
24:5e:45:0d:64:f2:1d:73:09:53:e6:51:6b:f6:57:f4:ff:23:
c0:d0:57:65:53:d1:fd:f3:90:60:88:c0:94:a6:83:b7:04:cc:
87:5b:48:5b:1b:05:71:19:02:2c:c3:c0:b0:3e:e6:c8:91:07:
91:f6:ff:53:cb:d3:4a:9b:a3:ae:8b:b3:b2:8b:1f:4a:e8:db:
4f:89:e4:1f:17:34:5f:12:2f:8c:d5:0e:80:1f:c2:59:ee:91:
b8:f3:ca:6a:f4:c1:f1:6e:be:f0:9b:dc:8d:7c:0c:26:f2:81:
6c:bc:a7:f1:d8:ce:f0:f5:44:bb:5d:1f:4f:d2:97:71:7c:54:
72:67:62:22:75:6c:41:ea:38:4c:6b:df:5c:b3:13:47:6d:f6:
43:1a:2d:2f:99:ed:3e:87:55:26:ae:e8:32:3f:40:36:81:a4:
1e:b8:15:14:1c:70:44:9f:5a:38:84:0b:85:8e:0d:d6:80:9c:
a6:e3:37:ae:31:3b:5b:c1:ad:0b:8f:4b:b4:d1:65:ba:e5:02:
b5:15:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:41:10 2025 by rpki-client