Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
File: KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft (raw, json)
Hash identifier: PidNcUKrLX7VMBAeMMe4P5s/Bkm/jU2HGhFQ3ybLQYo=
Subject key identifier: C4:47:B5:73:1F:5C:D7:0C:6B:3F:E2:9B:49:33:ED:50:C5:E0:47:0D
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 01976C61DE9EDA13C81860E8949F145EEA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
Manifest number: 0C0F
Signing time: Sat 14 Jun 2025 03:00:42 +0000
Manifest this update: Sat 14 Jun 2025 03:00:42 +0000
Manifest next update: Sun 15 Jun 2025 03:00:42 +0000
Files and hashes: 1: KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl (hash: ZsgVvgWlPQOjZcndHzmso8o88oHzQtMTgy2/52iu4Q8=)
2: ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa (hash: jpk5x0LJxA24GS/spf+1miQnvaNt5hobGzGQml9l9aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:de:9e:da:13:c8:18:60:e8:94:9f:14:5e:ea:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jun 14 03:00:42 2025 GMT
Not After : Jun 15 03:00:42 2025 GMT
Subject: CN=c447b5731f5cd70c6b3fe29b4933ed50c5e0470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:d4:23:5a:07:2c:75:25:c4:ac:03:ae:70:
be:6c:a0:8e:5b:c9:04:bb:30:5f:62:ad:bd:ab:1c:
18:df:de:9d:cb:cb:d5:5d:40:2f:86:31:94:db:2f:
86:dc:02:bf:fc:49:bd:6b:1c:e1:ed:71:98:ca:d5:
51:04:4d:9c:10:9b:23:f2:72:78:12:3b:c5:ed:f8:
a7:3d:8b:ff:90:46:ba:83:2e:42:22:c8:10:5d:2e:
bd:30:f5:e5:19:9c:35:20:4e:e4:f0:fa:b4:4a:98:
4a:e6:a6:b5:a2:81:06:a7:e4:9f:12:2c:22:21:b5:
11:a7:b5:c9:79:1d:c3:d2:ef:5a:aa:18:bc:25:58:
01:82:45:ba:4d:f6:5a:60:7e:45:4d:5d:0d:5e:f9:
88:1c:9d:e6:4e:bd:f0:2e:2d:1b:81:44:ba:64:e7:
89:6d:d1:fc:53:59:aa:7d:07:29:7b:78:11:10:ef:
87:ba:1f:ba:14:49:8a:a8:b9:e8:35:bb:09:e4:7b:
64:32:13:84:71:85:af:b3:d6:8b:f8:07:0b:42:db:
21:de:d5:c2:e5:30:a9:ef:23:d9:00:58:66:17:d0:
3d:cd:3d:f9:3f:f8:d0:ef:24:7e:e4:ae:82:c7:39:
13:11:6b:d4:ef:ee:23:9b:6f:d8:67:dc:c3:d4:23:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:B5:73:1F:5C:D7:0C:6B:3F:E2:9B:49:33:ED:50:C5:E0:47:0D
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:34:41:94:4a:c5:6b:59:e6:e5:5f:64:10:df:41:b4:e7:
e9:80:9d:a8:a4:54:17:04:d2:4e:23:dc:4f:9a:0d:b9:e0:af:
7f:44:3a:63:4f:65:e5:1c:f0:d8:12:47:42:24:ac:2c:8a:91:
f9:8f:90:d9:13:92:cf:74:76:49:bf:9a:e1:16:ba:1f:bc:9c:
aa:13:ed:93:2b:de:37:33:4c:86:97:71:c7:39:fb:f1:ed:83:
94:8f:ad:6c:ca:ad:44:58:a2:c7:93:db:23:c5:b8:33:6f:7c:
c4:9b:67:b7:0c:0b:3b:0d:ca:4b:2a:3d:5b:8d:18:95:6d:a2:
61:b3:9c:e7:4c:b5:c1:68:11:02:92:c1:c3:a7:57:4b:6d:c3:
c6:c3:69:2c:70:54:86:36:68:80:84:4f:3a:e6:16:80:24:cc:
e3:80:91:65:b7:b9:dc:c2:91:67:f4:60:c9:00:bb:cf:94:0e:
82:ab:eb:4d:e2:dd:b7:da:d1:c4:82:2a:1c:ae:3e:fb:87:83:
a3:dc:ac:1f:b9:9a:5f:28:b6:4c:20:f2:6a:b3:15:08:26:af:
68:bf:75:7d:40:8b:34:cc:96:c4:b7:8a:91:59:2e:17:77:ca:
6f:fb:30:fe:66:f5:e3:b8:8e:c0:9b:6a:a4:ce:6f:e9:ca:3c:
b8:87:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:42:05 2025 by rpki-client