Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: LLI1pOG2D+nwIvImO+z12rjUqnfky72kpAj7pxonxgY=
Subject key identifier: C6:EA:BB:CC:11:72:EB:76:D9:3B:39:E6:87:86:E8:77:67:2F:A6:18
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 01976CCF6B9AE6605A48D0560410BE66E913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0CB7
Signing time: Sat 14 Jun 2025 05:00:22 +0000
Manifest this update: Sat 14 Jun 2025 05:00:22 +0000
Manifest next update: Sun 15 Jun 2025 05:00:22 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: UGktqKE8DKCq7+8VKDSUkpaygAB04U2gH1U+DHj9Uyc=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6b:9a:e6:60:5a:48:d0:56:04:10:be:66:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jun 14 05:00:22 2025 GMT
Not After : Jun 15 05:00:22 2025 GMT
Subject: CN=c6eabbcc1172eb76d93b39e68786e877672fa618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:d7:8c:f7:73:a3:2b:91:31:96:fb:2f:3f:
80:56:f6:e0:13:c9:5f:a0:6d:b1:df:af:5b:e3:44:
11:9d:84:2b:b8:99:79:e1:03:a4:39:2a:24:fd:5f:
f6:0a:a9:3f:d9:2b:55:5a:8d:04:b2:2a:de:72:35:
d9:22:f7:3a:a1:4d:da:99:54:ae:ba:98:c8:ac:e4:
4b:06:27:64:c6:49:38:6d:cc:62:c4:f1:83:28:e0:
9c:fc:05:37:b2:53:39:28:8b:f2:1d:c5:af:89:8b:
d0:93:c9:e6:4d:58:a4:d8:e2:cb:e7:68:02:ca:ee:
fa:d5:c5:51:af:58:c9:e6:02:7d:c4:53:16:9f:66:
13:76:2f:c9:a0:e1:4f:e5:fc:14:e0:3f:fb:f4:6b:
54:4f:d4:62:0b:05:5f:18:d5:33:41:82:0b:a9:bb:
49:ae:3f:8e:71:dd:99:96:66:48:29:c7:7d:67:c1:
48:3d:b3:5f:1b:9f:9d:95:a1:34:bf:0f:a2:17:10:
6c:bc:6e:c9:4c:ab:36:22:42:ce:3d:a7:c8:ca:94:
90:35:04:e1:d8:34:bc:70:f6:3c:09:56:47:2e:99:
af:e6:f9:e2:be:4f:e3:81:c2:67:60:a7:d7:f0:a2:
38:d2:9b:63:09:a8:56:72:fb:54:40:2f:b8:c7:03:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EA:BB:CC:11:72:EB:76:D9:3B:39:E6:87:86:E8:77:67:2F:A6:18
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3e:fd:3f:e9:f7:4d:60:0a:f8:b0:8e:b7:e8:71:2b:5e:7b:
87:22:56:57:13:8a:13:53:4d:2f:42:09:3a:39:8d:04:86:1b:
6a:09:ca:03:2c:9b:69:41:0f:39:c5:05:ac:3e:12:98:1c:38:
7f:bc:fa:c4:14:e7:ce:43:58:0a:7b:c0:36:e0:69:46:ed:0d:
a3:0d:3b:82:d0:25:d5:0a:a2:23:11:4e:78:ce:b5:03:6c:e0:
3e:92:9e:78:60:4c:b2:34:e0:32:8f:d5:e7:f3:11:bf:1c:dd:
3d:88:53:95:98:93:f4:e9:96:85:7f:91:40:c2:9a:87:79:99:
25:48:b2:69:7f:dc:5d:c2:ed:e9:56:15:22:f5:4b:88:6d:ed:
2d:35:8c:65:53:25:7a:0b:44:8a:1b:e0:9b:93:6b:09:f3:bf:
5f:fe:2e:e8:87:8d:5e:9d:a7:75:ed:70:9a:80:80:6f:97:78:
15:e5:13:7a:e6:46:64:48:ba:b6:df:6c:7f:f3:ce:0a:f6:83:
2b:e4:81:8e:66:3e:72:01:43:31:de:fc:ee:8f:ee:0f:1f:72:
ba:05:f9:89:2b:10:dc:ab:0f:31:c7:7b:13:78:1c:cc:9b:60:
94:9a:e4:40:0c:5a:46:e3:4f:34:10:b8:4d:e3:b9:3d:93:c0:
32:6b:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:47 2025 by rpki-client