Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: dAa+PUMCoAgED2KqoP8kT+taAcoM8UwGgPJOe4CroU8=
Subject key identifier: 78:89:8B:4B:A0:CC:7A:9F:11:85:66:32:8E:14:23:91:B2:3C:51:A6
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 0197866079B41DEB8F097D8FFBA844E0CFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 04:09:18 +0000
Manifest this update: Thu 19 Jun 2025 04:09:18 +0000
Manifest next update: Fri 20 Jun 2025 04:09:18 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: c6lzs+C6U9+hRDvj+U8AyL+8Q2GdJTbsCR0w0h+2XZ4=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:79:b4:1d:eb:8f:09:7d:8f:fb:a8:44:e0:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Jun 19 04:09:18 2025 GMT
Not After : Jun 20 04:09:18 2025 GMT
Subject: CN=78898b4ba0cc7a9f118566328e142391b23c51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:14:b5:42:e1:9c:a6:c6:e6:43:4e:96:ed:
57:03:0d:0e:8f:45:89:be:0a:df:30:05:ee:b6:01:
fb:0b:a7:55:92:a9:a8:58:9e:c7:e2:c9:0d:5b:1e:
0f:d6:b7:e7:cb:f6:ea:51:3d:e9:95:6a:f2:98:b9:
70:e4:10:19:e9:33:1c:c2:af:ad:d6:72:7a:17:8c:
50:75:b1:60:95:89:2a:57:e8:9f:2c:6f:7c:98:ff:
73:99:31:33:6d:96:88:ad:fc:b3:26:ff:b1:c9:1e:
ad:54:77:f3:61:e9:d1:81:c1:a0:82:f7:81:dd:21:
bc:68:06:20:a9:01:33:5e:5c:ea:b4:cb:16:c0:67:
cc:74:ff:fe:88:fe:53:17:da:5f:e5:ab:39:7b:07:
69:a6:f0:e4:1c:1c:31:f1:e6:b5:f9:a5:20:c6:90:
3e:9a:01:94:d7:af:c2:1d:2a:4f:c9:19:1a:fb:cd:
aa:dc:81:43:4b:a1:b5:06:58:27:77:c5:65:85:27:
33:d5:75:8b:9a:9f:6a:a4:15:6a:38:4f:4f:81:7c:
af:70:2d:d0:d4:6d:eb:a2:d6:ea:ce:8a:86:0e:fe:
cc:4c:97:61:01:63:15:b7:1b:c1:52:05:57:38:a2:
c4:e9:06:30:53:3a:b3:d1:5d:8f:ab:85:c2:29:b9:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:8B:4B:A0:CC:7A:9F:11:85:66:32:8E:14:23:91:B2:3C:51:A6
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:bf:fd:a2:f6:34:f5:c5:de:f1:b4:ea:e9:48:17:33:bf:
e9:e6:88:c5:3a:2a:b9:74:b3:0d:e5:1e:35:b4:11:b6:61:9c:
13:15:64:dc:01:3b:4e:bc:68:c3:7c:97:26:29:04:a9:8f:6c:
cd:4b:f0:3f:f5:9e:1a:ea:44:ee:c6:e0:c1:87:86:cd:af:a8:
ed:f8:a5:ef:71:b1:f8:7a:6c:17:46:af:94:e9:c7:c7:eb:30:
47:36:50:3d:97:20:2c:ae:e0:7a:84:3e:e2:bc:46:5a:40:74:
39:82:87:bf:cb:33:da:04:19:c4:03:58:bb:de:39:8c:5a:1b:
82:16:37:8a:ed:a3:7f:44:c4:26:44:47:c0:e4:6d:82:9f:04:
8c:ce:2d:20:fb:09:1d:a4:74:7f:e1:b4:70:e1:2f:d6:fe:10:
69:ca:ee:f9:6a:3b:9b:0f:01:c3:54:3a:c8:2f:28:a6:6b:cf:
92:84:4d:3d:db:17:2b:ea:99:1f:ae:4a:a3:e8:2f:4c:18:20:
d8:22:3d:e6:7d:46:85:98:32:2f:f4:4a:1f:84:2f:00:16:f2:
40:4a:16:24:af:30:e6:0a:fd:87:7c:3c:eb:b1:ad:06:d7:23:
8e:23:d5:b5:4f:dc:d2:41:a8:a6:1c:cc:e2:8b:02:c3:19:8a:
2f:09:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:12:32 2025 by rpki-client