Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: YK/1G9umJfu05Y06hKC2ajkKvlcUhVD50z6fd5KLuV8=
Subject key identifier: 2B:49:EA:E6:D9:DD:0C:27:12:3F:89:B9:7A:66:CB:18:FA:85:19:00
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 01976DAB3F152E17E0064A77E0B605652278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 0F8E
Signing time: Sat 14 Jun 2025 09:00:28 +0000
Manifest this update: Sat 14 Jun 2025 09:00:28 +0000
Manifest next update: Sun 15 Jun 2025 09:00:28 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: OpG8ajrJLeJEOdte4NdBsNVCDnXQzhi2rIWJECDua7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:3f:15:2e:17:e0:06:4a:77:e0:b6:05:65:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jun 14 09:00:28 2025 GMT
Not After : Jun 15 09:00:28 2025 GMT
Subject: CN=2b49eae6d9dd0c27123f89b97a66cb18fa851900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:a4:b3:82:2e:a9:3f:b3:81:05:17:06:a3:
d6:d7:ec:67:78:99:c4:e1:de:16:7c:24:a4:b8:0e:
4a:e0:11:ab:52:61:de:7d:ef:70:e8:78:a0:0f:55:
7e:0b:1e:b1:e7:7a:0c:1d:41:20:5e:6a:6f:da:17:
ef:c3:e1:24:44:84:a9:21:e2:0a:ae:fe:5c:ad:7a:
31:02:57:66:c5:a6:71:0f:f4:35:0a:62:f9:d6:dc:
26:2b:4f:ee:aa:83:d2:c8:3d:ab:6c:e8:92:c6:37:
e5:f4:9a:8d:23:9f:39:0f:60:1e:5d:d9:bb:52:8f:
fe:80:96:a6:b0:0a:80:d2:fb:10:d5:a5:c3:35:ad:
b8:e7:4d:4b:97:60:6e:d4:62:0c:a2:bb:1e:43:89:
b3:cb:c9:20:99:46:dd:3b:a9:0c:c6:44:4c:e0:5f:
db:95:64:71:3b:da:63:f3:d8:0c:cd:6e:c4:cd:07:
3e:27:96:cf:58:eb:80:1b:53:0f:46:eb:21:53:bc:
0c:05:6d:2c:c7:28:65:ee:58:83:d5:3a:ad:73:2a:
cb:31:e3:a7:68:da:31:6b:af:38:8c:41:8e:92:7d:
fc:81:db:29:a2:8d:7a:45:76:b1:67:2b:d7:04:89:
d2:a0:d4:c7:40:f7:be:eb:43:a3:44:58:8c:ba:0e:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:EA:E6:D9:DD:0C:27:12:3F:89:B9:7A:66:CB:18:FA:85:19:00
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:61:78:5a:3d:0e:fd:3b:01:fc:f8:50:2d:4b:16:17:f4:e7:
1e:9e:90:8a:81:ae:3d:c6:0f:b0:94:c0:3f:f5:4d:cd:f3:dc:
6a:2e:3a:e3:b1:28:c7:48:31:3c:8f:50:6b:89:6e:53:82:25:
a5:1f:da:48:a8:a7:cc:d4:24:01:90:ff:94:e7:d3:fb:14:b1:
62:52:dd:74:df:53:9f:55:d4:5f:f4:81:30:97:23:3b:c7:a7:
38:85:83:83:95:84:38:3a:43:6b:ac:ba:c3:07:52:7d:74:10:
bb:c4:c8:50:47:f2:b8:cb:c6:95:5b:15:36:3f:83:08:82:09:
22:4b:40:12:e4:62:5d:e9:6b:5c:b0:08:6e:16:62:e2:64:6a:
55:28:9a:2e:21:1b:3d:b4:64:b5:2c:89:04:4f:6b:84:a5:9c:
94:15:ed:ce:a3:47:2f:9a:cc:6b:14:cf:03:3d:86:17:6b:94:
eb:66:32:66:72:d1:cd:4c:f8:12:9c:54:29:20:7e:1b:0a:8b:
52:81:8a:1a:65:03:39:31:d1:5a:b5:8f:28:63:a8:19:de:a0:
f3:91:33:be:1b:ab:b1:14:a4:6b:2d:81:c1:be:78:e7:83:bf:
da:9a:c6:02:19:56:e8:16:6d:95:a9:43:ed:e8:81:7e:49:9e:
ab:50:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:00 2025 by rpki-client