Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: SxnwsO1LU0y5ldwHobDQF7ZWm0Z5bD4I3yZGX4xfKts=
Subject key identifier: 3A:58:08:0C:CD:57:CF:15:8A:D6:A2:49:55:A1:25:2A:4D:EC:BD:F9
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019778D4D434E38F27677BDB643D3EA0E6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 13:01:43 +0000
Manifest this update: Mon 16 Jun 2025 13:01:43 +0000
Manifest next update: Tue 17 Jun 2025 13:01:43 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: 0Z4RTgGiIwPMdjaZPmyFgYtgPOyEjHTdbjrhU32GJKk=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:d4:34:e3:8f:27:67:7b:db:64:3d:3e:a0:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Jun 16 13:01:43 2025 GMT
Not After : Jun 17 13:01:43 2025 GMT
Subject: CN=3a58080ccd57cf158ad6a24955a1252a4decbdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:d2:3a:b9:e2:f4:4a:e3:4e:bd:56:20:db:
67:4a:0e:7f:3d:33:5a:f8:75:f5:59:d1:45:e1:8a:
c7:74:d0:c9:9a:0a:9d:0a:37:76:aa:04:f3:da:8b:
38:81:e6:1c:09:32:fe:4d:00:ae:88:cc:69:73:5e:
eb:3c:97:fa:df:5b:f4:86:ff:f4:46:3b:01:2e:19:
b2:b6:3e:8c:93:5a:fc:df:59:d0:7d:d6:5d:af:ff:
f6:00:8d:3f:93:cd:bf:d2:a0:d9:bb:2b:72:c1:65:
4e:1a:91:be:cd:f0:4e:a9:db:bb:70:fa:5a:be:ca:
d3:35:31:0a:72:68:b0:3e:7b:45:0b:56:62:91:c7:
2a:34:15:cf:38:9e:55:8b:e2:8a:07:b6:30:a5:fc:
74:15:23:96:b8:fe:ec:f8:1d:b5:2a:41:0c:d2:fc:
2f:df:e2:60:21:4a:8e:d8:60:34:e2:0a:9e:76:e1:
52:93:6b:f1:73:84:b4:46:71:67:da:9a:ba:65:54:
03:9c:15:ab:da:e2:3e:79:19:0a:19:20:4c:88:65:
76:8e:d4:7f:e4:5d:62:58:db:2b:28:99:c0:67:62:
a9:58:6d:33:a3:18:23:df:26:81:ff:89:e6:dc:e2:
38:d1:2b:17:53:59:0e:8f:e6:3f:17:7c:82:ac:f6:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:08:0C:CD:57:CF:15:8A:D6:A2:49:55:A1:25:2A:4D:EC:BD:F9
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:b4:66:a3:20:57:54:f5:e9:de:08:12:89:93:fd:61:7a:
bb:92:ed:27:6c:af:a3:fa:f7:f2:26:1e:49:12:3b:cc:59:c8:
f3:85:b8:c2:35:7d:67:c0:5f:a3:e3:c5:37:a7:d2:6a:b2:73:
a4:3a:bd:0c:24:1e:30:c2:a1:f0:e9:4b:b5:3b:86:80:5a:2e:
d9:32:29:8a:6d:6c:b2:db:fd:cd:ea:20:d5:5d:3e:02:8c:5d:
6c:d1:88:bd:08:ca:ec:be:0d:04:f1:fc:0f:7a:60:6a:16:53:
33:04:4e:c1:56:6e:4d:b9:bb:e4:cf:d7:04:b8:10:f7:c6:b9:
a7:82:63:19:68:55:95:9c:2f:43:43:dc:4a:c4:f7:1f:7e:da:
6f:cc:46:de:97:4b:11:b1:b7:e1:00:0b:d0:a2:5c:46:16:9f:
f6:e8:68:dd:48:29:9c:ff:a7:e0:f7:4e:a4:7a:ac:79:75:48:
e5:8e:1a:b1:7d:a6:7e:41:09:dd:3b:52:f8:db:50:24:48:23:
7d:66:59:10:45:92:2e:e2:79:82:56:bb:0d:aa:3c:7c:66:59:
40:c6:08:cf:3a:d7:5a:4e:65:82:e5:56:84:87:b8:bb:12:20:
73:8b:46:f2:d6:02:48:cd:76:ea:6c:3b:fc:2b:62:42:fb:d3:
62:bd:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:02:40 2025 by rpki-client