Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: rOLdBAzTiC2nd9IbEj6sz9HwLScOYm7p3ASrtkRP2vI=
Subject key identifier: 91:3E:C6:91:00:B5:5C:68:0E:BD:F2:EF:CE:D4:74:FE:BF:6C:11:3F
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019788B4DE4FD4DD2797C390AAEFF9CEC92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 046B
Signing time: Thu 19 Jun 2025 15:00:44 +0000
Manifest this update: Thu 19 Jun 2025 15:00:44 +0000
Manifest next update: Fri 20 Jun 2025 15:00:44 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 1gfFvK3Y7npnnwkFAZJ/fUvuSP+mddMJtn7JJgbRr74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:de:4f:d4:dd:27:97:c3:90:aa:ef:f9:ce:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jun 19 15:00:44 2025 GMT
Not After : Jun 20 15:00:44 2025 GMT
Subject: CN=913ec69100b55c680ebdf2efced474febf6c113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:c8:c0:46:c9:5f:64:4b:a3:b2:45:fe:ca:
89:32:e8:7b:e3:8d:bd:58:b0:af:9e:fe:a9:0c:dc:
64:15:5c:7d:65:47:d4:27:0b:9d:17:74:ef:b3:1b:
02:74:ff:94:77:a0:5d:ac:f9:ee:d1:d9:35:2d:6a:
e3:3c:91:98:d3:17:ff:7d:91:01:9d:0d:9a:ad:61:
99:24:2b:3b:15:b6:66:bc:82:68:b2:9b:73:af:03:
a1:13:83:9f:2c:7e:50:fb:18:6e:36:d0:f1:8e:e6:
43:f1:19:ca:14:7f:45:7c:79:9f:7e:bd:0d:70:cd:
61:e5:27:ec:de:c6:56:cc:97:2e:a3:ed:03:49:90:
5c:fc:1b:93:21:1a:04:87:8a:6d:bf:64:cb:2a:d1:
a7:95:6c:ef:99:34:6f:a0:59:6e:f2:03:27:0d:4c:
47:60:a8:e4:63:95:db:50:cf:bc:02:9e:9d:aa:61:
9c:ad:63:05:75:ef:48:44:0f:3f:eb:90:35:70:c5:
90:de:78:ab:cb:15:02:4c:9a:6b:dd:09:68:3f:b8:
a8:e7:9e:35:a5:45:db:8c:51:bf:d7:0f:e6:ac:a9:
83:9e:52:fe:d7:8e:21:24:c0:bc:ab:52:42:89:fb:
55:25:4a:19:ba:bc:d8:d4:2c:89:ee:d0:c5:47:35:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:C6:91:00:B5:5C:68:0E:BD:F2:EF:CE:D4:74:FE:BF:6C:11:3F
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:12:ae:0d:9f:ce:6a:da:a5:02:92:65:30:dc:17:83:5c:52:
a9:98:89:9a:0d:ae:98:16:ae:aa:28:1b:55:78:40:17:04:5b:
fe:ae:b1:be:d5:74:46:47:4b:1c:64:fd:34:e2:db:2c:70:4b:
49:8e:83:a3:be:4f:7d:ed:d6:dd:b5:c7:0c:3e:9d:2e:36:f5:
c4:6a:d1:33:9b:be:a1:b4:ae:fb:ac:a4:48:78:eb:83:5a:b6:
74:b3:bc:fa:d5:ce:29:4c:c8:aa:d0:97:13:ba:92:47:60:49:
e3:6f:da:06:91:a3:c5:24:af:4f:ae:64:a0:d5:73:f4:f5:7d:
6b:58:2c:d3:36:41:94:11:3a:1e:f7:d4:90:29:95:2a:2a:74:
60:7d:7b:22:6d:52:1b:c2:c4:70:df:0b:d1:05:cf:f1:8f:cb:
ff:da:3e:44:da:7f:37:20:b1:d9:63:d9:51:84:14:1f:81:3d:
f6:2f:c8:dd:dd:ce:f1:4e:38:ed:74:9a:f9:fc:a8:1a:b3:16:
48:2a:51:f1:c1:38:ec:59:45:8f:12:2a:ec:50:9f:53:6c:cb:
0e:08:e3:87:9b:64:a4:80:f9:f0:dd:32:de:51:05:48:3c:d8:
48:81:ce:07:73:b9:6c:d6:d6:fa:2c:16:17:0f:fd:f8:12:4d:
f2:80:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:55:10 2025 by rpki-client