Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: WuN+fxuhWIwY66QNfE5H19u+8iw2+PQwF5P6iA/scaU=
Subject key identifier: 59:0F:41:42:9C:12:BC:66:45:BF:F0:DE:46:68:F2:A1:56:F1:85:4A
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01976E87558D29A816E0B470385204FF2160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0E9E
Signing time: Sat 14 Jun 2025 13:00:52 +0000
Manifest this update: Sat 14 Jun 2025 13:00:52 +0000
Manifest next update: Sun 15 Jun 2025 13:00:52 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: A0rCJTVqZ5ir3umokZEm6R2I+yOPHLtJBHJBPaFTzOs=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:55:8d:29:a8:16:e0:b4:70:38:52:04:ff:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jun 14 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=590f41429c12bc6645bff0de4668f2a156f1854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:2b:10:d2:2b:d4:e4:e0:45:eb:96:1c:26:
25:ba:0b:4d:e6:fd:98:75:a2:c3:23:40:36:54:61:
3c:85:e2:31:1e:c9:81:89:46:94:16:2e:d6:60:ed:
3d:93:7d:ac:37:2e:59:36:7a:c7:b7:f5:1f:e9:21:
2f:c7:1e:0b:aa:a4:1d:0b:35:90:a9:49:de:01:c5:
bf:4c:c6:3d:3c:27:86:43:12:e8:b2:a4:7b:5d:67:
3d:fc:89:2e:6a:10:38:92:e6:9f:07:d9:26:04:6a:
32:6d:9a:a0:39:7c:ee:1a:62:20:63:a8:ff:07:53:
56:17:9c:92:6f:54:5e:af:85:7e:b9:d3:30:20:db:
3b:df:24:59:d2:0e:74:b7:0e:2e:7c:05:e4:ce:5b:
a3:53:e4:02:b2:cc:a7:90:e6:b0:bf:71:7b:0a:a4:
ee:91:18:15:7a:4d:1f:13:b8:96:25:60:a9:2f:c9:
2e:17:98:9b:e4:c9:26:7e:4d:67:64:35:48:08:a5:
16:d3:d3:c8:71:37:1e:c0:65:32:a1:8e:aa:f6:06:
51:fb:fd:73:33:c0:b9:f8:e8:00:31:ff:d8:31:aa:
97:60:3d:e0:94:97:ca:c5:7d:b7:74:36:0a:21:25:
4b:b1:1d:3f:7a:52:48:9d:48:e5:fb:7f:e1:16:26:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:41:42:9C:12:BC:66:45:BF:F0:DE:46:68:F2:A1:56:F1:85:4A
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:70:78:b0:ef:13:dc:75:04:98:6a:ce:66:0d:b1:c4:40:38:
27:96:ce:5d:f9:fc:43:39:a9:d6:06:b7:fb:2c:39:f3:9e:5b:
67:23:31:85:e0:cf:36:b6:2f:a2:87:28:f7:a4:f4:d5:0d:27:
80:65:d3:93:59:46:b3:dd:aa:fa:38:c7:c3:9d:dd:1f:08:63:
a2:79:9d:5b:e1:ba:c8:29:99:b4:df:1b:b0:12:64:21:52:8d:
3d:3d:95:10:d0:8f:7e:00:26:3b:e3:9a:d2:6b:d0:fd:2f:9b:
ed:28:6c:f6:c8:69:94:da:11:c4:be:33:75:b1:4e:12:1d:16:
e8:81:82:2e:5a:d3:f2:17:67:b1:23:d8:f1:a6:c4:6c:fe:d1:
56:69:96:09:8a:19:35:6e:d7:6e:1c:91:66:6e:3a:8b:98:6f:
5e:0b:a8:fe:89:8b:32:e2:80:81:0d:24:40:20:2e:17:46:e8:
20:3e:d0:28:f2:ef:ab:94:cc:15:64:d3:c2:98:2b:84:87:33:
e3:e5:f8:dc:8c:35:4c:e5:72:50:37:37:69:87:27:4f:22:a5:
57:ce:1a:2c:a1:a9:d1:9f:85:7a:5c:d4:57:16:f7:0d:68:7e:
29:0b:ed:d6:5a:eb:eb:e7:18:9a:21:dd:d3:b8:4c:5d:30:05:
5d:0e:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:46 2025 by rpki-client