Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: 0/bQsbjdZKzE3gbFLzgvFI6Mnq4iOeDqX7V5NwsQ6kc=
Subject key identifier: 40:0F:4A:E3:76:FB:F2:2E:8F:9A:8E:FE:EF:E2:6B:50:08:FE:B0:B1
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019768BBD48A103A0D5AEECA85D1FC889FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 0F87
Signing time: Fri 13 Jun 2025 10:00:29 +0000
Manifest this update: Fri 13 Jun 2025 10:00:29 +0000
Manifest next update: Sat 14 Jun 2025 10:00:29 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: DeOnZWnEbNl3PP1J4AZdLbYXvItrrP2lL4oDWoGKmuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d4:8a:10:3a:0d:5a:ee:ca:85:d1:fc:88:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jun 13 10:00:29 2025 GMT
Not After : Jun 14 10:00:29 2025 GMT
Subject: CN=400f4ae376fbf22e8f9a8efeefe26b5008feb0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:c2:aa:b8:41:64:d4:c8:da:37:dc:e5:42:
38:a1:6e:e5:62:41:c9:16:7d:25:db:de:03:17:1f:
47:a7:97:c0:fa:de:41:41:d1:02:1b:02:2c:b2:00:
69:7a:3f:dd:45:30:e6:9b:e0:ea:c9:00:83:aa:34:
b4:3d:48:1e:a8:5f:ad:38:36:2a:db:56:f4:c7:8e:
e6:68:37:3e:b8:bb:b5:fd:6c:60:55:56:b5:d4:35:
b8:94:c0:28:a3:3d:db:e3:d1:75:e7:16:2a:c2:88:
15:2d:8d:f0:f8:39:a3:62:07:16:0e:9b:79:c1:b3:
f2:0b:b0:2f:a3:13:65:ad:ed:09:31:26:f4:cd:83:
97:ee:ef:b9:f5:08:f0:87:df:15:3e:ca:3b:16:96:
e0:11:b0:d1:75:ab:be:c3:64:c7:6f:1d:51:bc:a4:
8e:35:a9:d5:6a:25:0d:8b:22:89:8e:00:51:f9:83:
06:59:bf:18:d2:e9:e6:e0:39:b7:59:11:3d:de:6b:
a0:73:4a:46:2b:e6:6c:9a:9b:99:2d:06:76:5e:b1:
c6:70:3b:fd:81:21:ca:ef:96:ca:40:b0:57:22:cb:
8a:f1:a9:5d:94:3d:dd:7c:e4:87:5f:24:22:aa:c0:
74:5c:0c:04:52:c2:7d:d3:69:8b:fb:e7:a4:d5:4b:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:4A:E3:76:FB:F2:2E:8F:9A:8E:FE:EF:E2:6B:50:08:FE:B0:B1
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:8e:06:e9:d0:db:f6:a8:46:96:e9:38:f8:38:57:4b:77:
2d:b7:dc:60:35:1f:1a:27:6f:50:3b:1e:0c:62:e8:52:31:e8:
97:9f:cc:d7:9f:cc:fc:8d:38:d7:de:f5:87:fa:ec:c8:21:0b:
d4:4d:3b:98:54:3f:54:b3:66:b6:59:4a:37:25:9b:9a:bb:0e:
e0:36:c5:06:95:8c:fb:9d:77:bb:dc:90:a5:61:84:af:ac:62:
d2:4f:84:3f:d8:d4:ec:b6:51:09:6e:75:e4:af:8f:f8:6c:ea:
32:d7:5e:76:5c:5d:b8:8b:36:2c:75:ee:f8:0f:b7:f3:18:e5:
c5:55:ef:f2:d1:6f:bb:c0:88:ef:f4:44:2c:38:f5:29:5d:fd:
71:68:4a:4f:ba:71:bb:32:15:96:c3:ef:c4:66:ac:59:01:8d:
1c:10:dd:ef:71:39:99:69:c0:c4:01:85:55:b2:40:6a:0e:34:
a4:7a:40:81:42:99:e7:f4:7d:99:f3:bc:37:ab:27:dc:eb:98:
e9:d8:45:9e:e3:54:85:12:50:d0:8f:cc:c6:6d:2e:1b:80:4c:
c8:23:c9:dd:bd:eb:5f:1d:61:fd:ee:ce:37:46:1b:00:44:6b:
95:7f:9f:bd:09:8b:e0:16:fb:5f:43:1d:88:10:7b:be:db:7a:
28:cb:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:50:33 2025 by rpki-client