Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: 36Dt8jfLxn3/B/Ze/ipM9zDIm22kudc/weNkOWUzOuw=
Subject key identifier: F9:8E:25:3C:DD:9B:D6:EB:FA:A4:E6:19:97:24:DF:24:3C:C6:2B:70
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019774F6EEB8AC7A7E7A0822BE2645BE704B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1402
Signing time: Sun 15 Jun 2025 19:00:29 +0000
Manifest this update: Sun 15 Jun 2025 19:00:29 +0000
Manifest next update: Mon 16 Jun 2025 19:00:29 +0000
Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: nZIInOIsTBVomWeYxpa6acomzKSmwDk0ov4B4CFYbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:ee:b8:ac:7a:7e:7a:08:22:be:26:45:be:70:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jun 15 19:00:29 2025 GMT
Not After : Jun 16 19:00:29 2025 GMT
Subject: CN=f98e253cdd9bd6ebfaa4e6199724df243cc62b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:62:07:05:f4:ac:d8:73:e3:83:75:cf:20:
22:ae:d0:14:9b:5d:8c:99:51:cb:5d:97:98:03:2c:
a9:e4:60:60:d4:0a:67:30:af:30:33:27:43:1a:72:
d1:26:75:d4:4c:22:bf:44:94:6e:c2:60:74:84:fa:
f6:1a:79:c3:bd:79:b9:31:b0:77:55:5d:29:be:e3:
68:b2:6d:71:10:75:07:9d:ce:7f:b8:d0:51:a4:4b:
08:ab:ff:c3:b1:93:c9:62:73:5e:0d:f5:b1:01:28:
e7:06:9c:73:3d:ea:5e:7d:85:c8:2e:82:47:56:c8:
35:88:db:79:8e:03:9c:45:a2:53:a5:db:d7:0e:d4:
d4:1e:ee:4a:14:9b:8f:ed:e4:9f:d2:fa:a8:e1:1b:
20:b6:d5:12:d4:c8:b4:a0:9a:b8:00:cc:93:1d:b2:
a2:06:70:b5:d7:cc:4d:51:ae:11:b1:1a:75:6e:2b:
b1:a0:8e:65:d4:62:3c:dc:8f:a7:26:e6:38:cb:ee:
80:43:18:44:f6:89:f8:e5:4a:95:a5:d1:76:e5:05:
ba:0c:af:be:9b:2c:6d:34:df:4f:77:34:bd:99:83:
94:68:07:74:5e:72:a4:cb:31:f1:04:2f:6a:0e:0a:
21:12:ad:6d:0a:18:de:ce:b7:6d:0c:49:67:1b:09:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:25:3C:DD:9B:D6:EB:FA:A4:E6:19:97:24:DF:24:3C:C6:2B:70
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:15:23:f7:fe:cb:15:10:7e:5c:20:9a:e8:3f:63:30:67:
4a:60:d9:c6:a9:4c:5a:3c:df:20:71:8d:c4:05:b0:13:23:07:
8b:d8:2e:21:00:01:8e:98:60:74:04:87:41:d9:2a:b4:e1:71:
14:70:c1:44:e8:16:a4:6a:cc:e6:19:57:6a:0e:2f:c4:91:d0:
10:3c:a2:e0:ed:c1:51:1e:d3:4f:24:97:72:13:36:2d:e9:d1:
79:b5:98:c6:94:74:25:d8:89:55:78:9a:98:27:2a:cd:ac:7f:
88:22:be:19:39:e2:b5:e9:c5:f1:af:91:6c:8e:a5:ed:39:0b:
58:b8:82:ad:ca:da:23:17:31:98:99:17:1e:bc:4d:df:81:7b:
39:35:05:87:d9:82:66:05:a6:0e:61:a6:f8:01:f2:28:ec:04:
25:f5:f5:81:02:09:ea:89:d1:f8:4e:52:02:77:15:e7:38:99:
fe:a6:f7:a3:0a:4f:44:9e:c5:ec:a2:a2:b8:4f:9f:c4:55:cd:
eb:af:1d:c5:9d:93:06:fe:05:48:74:13:1d:fe:56:0b:90:e0:
9b:58:4c:32:ab:57:e8:ce:b3:88:62:dd:93:06:2d:1f:47:cb:
c2:97:23:70:04:84:81:37:75:32:71:2a:ea:c3:e0:18:30:ad:
ec:8a:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:56 2025 by rpki-client