Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: +sqvfsqJUC3wt5P3u02zNp0Vf7ZzZF4ZoMYEbV/0QE8=
Subject key identifier: 5F:ED:24:41:D1:54:56:FF:4C:A5:90:10:2B:A3:D4:B8:A0:CD:82:D8
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01977151434689D4ABB71DD9C99F4A0416F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1522
Signing time: Sun 15 Jun 2025 02:00:40 +0000
Manifest this update: Sun 15 Jun 2025 02:00:40 +0000
Manifest next update: Mon 16 Jun 2025 02:00:40 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: gs3plNh8czmyzannQch6SMHk8un4v3gUm+wgCnemYRM=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:43:46:89:d4:ab:b7:1d:d9:c9:9f:4a:04:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jun 15 02:00:40 2025 GMT
Not After : Jun 16 02:00:40 2025 GMT
Subject: CN=5fed2441d15456ff4ca590102ba3d4b8a0cd82d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:8e:07:a2:b1:cd:1a:11:93:5f:c7:e7:8b:
a7:d6:df:99:17:48:df:09:2d:18:2c:d0:ad:90:56:
d7:7b:1f:ec:01:81:ba:cf:1a:85:bc:34:cf:aa:8a:
9e:1a:ae:64:b3:83:8c:d2:cf:f2:b9:e5:00:8a:39:
c0:15:2f:1a:05:c6:50:b0:35:a2:6f:6c:4c:f5:90:
37:79:19:27:63:49:46:86:09:6e:34:46:13:2d:e8:
13:ca:fd:18:49:06:b6:2f:43:4e:36:29:ae:7c:3a:
3a:ec:cc:dd:65:13:12:1d:68:02:aa:fb:3b:ca:63:
e7:7f:75:c5:1a:3a:5c:97:6c:e1:e5:ec:56:f6:d1:
ac:23:b6:5c:61:d3:fc:ac:dc:56:5e:25:18:5e:6c:
27:07:6e:59:16:da:4f:29:fd:21:5c:26:3b:ac:a5:
1a:bc:d4:db:17:44:9d:51:e7:ec:4d:8e:3a:5d:01:
9e:0b:49:8a:fc:14:10:af:41:67:80:3b:26:1f:7f:
82:21:30:ea:31:9f:70:8b:2c:40:77:1b:9d:d2:bc:
d3:4e:9a:26:fe:27:eb:5d:52:90:59:a4:bc:55:80:
3e:4b:e9:24:e4:b4:51:ba:c1:de:7a:ae:e1:48:14:
06:4b:6a:2d:20:1d:f0:2e:ab:45:88:f7:43:26:f5:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:24:41:D1:54:56:FF:4C:A5:90:10:2B:A3:D4:B8:A0:CD:82:D8
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:29:8b:62:0f:62:7b:20:6d:77:30:58:0d:73:b4:63:b9:bb:
c3:87:0f:ba:8b:e8:11:f3:ae:38:be:ea:64:7d:91:61:ab:eb:
26:8d:dc:04:c2:de:2a:ea:4f:b9:b2:c9:49:72:70:67:0a:60:
e5:c2:e6:51:28:ce:2d:57:86:88:8f:10:cc:10:24:3a:b4:3f:
2c:bc:ba:3e:01:dd:8c:84:ef:6d:78:52:f4:22:19:e3:a3:1f:
1d:29:20:49:73:63:c3:a1:96:d2:47:7b:02:3c:37:fc:d6:68:
6d:40:39:e1:b7:83:96:45:00:cc:89:0e:39:e9:82:58:e8:cd:
1a:4b:97:8c:c6:bd:58:51:2b:3d:1b:9a:1e:ee:05:35:f3:b9:
f5:3c:f9:bc:25:9b:78:6c:e1:7e:57:41:73:24:db:b9:ba:fa:
03:df:00:8d:06:34:91:6c:cd:34:8a:03:1c:07:84:03:20:6b:
b4:32:c0:86:17:cd:a2:4b:7e:ea:73:5d:94:54:a1:8d:e1:0c:
02:7f:c4:3a:77:26:d2:a8:1b:eb:9a:b6:8d:6c:c6:1d:cf:c3:
db:c8:c3:aa:01:7c:17:aa:a2:82:04:ec:f0:c2:82:0c:76:4e:
c1:c5:9d:c2:37:d3:e4:9f:6a:1d:e6:a4:9a:a2:4f:07:74:c8:
a1:b1:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:54 2025 by rpki-client