Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: RkG0fcdP8Zqknn9ScPtBSGqubimQxhm9sZs5YZ94Lyk=
Subject key identifier: 8F:A1:4B:C7:D4:32:82:E2:AD:41:3E:1D:DF:D4:D1:15:7C:55:26:3C
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 01976D06940B0493EB8EC5B6AA74D0690F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 05E6
Signing time: Sat 14 Jun 2025 06:00:36 +0000
Manifest this update: Sat 14 Jun 2025 06:00:36 +0000
Manifest next update: Sun 15 Jun 2025 06:00:36 +0000
Files and hashes: 1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: RDmq3sIu7Mj751gMYoNSkjBSB2RmJPX3Aacmc+omRUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:94:0b:04:93:eb:8e:c5:b6:aa:74:d0:69:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Jun 14 06:00:36 2025 GMT
Not After : Jun 15 06:00:36 2025 GMT
Subject: CN=8fa14bc7d43282e2ad413e1ddfd4d1157c55263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:80:02:eb:7e:47:81:1a:23:72:17:b1:cf:
b2:47:c6:ee:bd:48:fa:18:49:87:72:cf:84:7b:44:
b5:eb:6b:61:42:79:06:67:88:8b:9d:53:63:71:5e:
fa:f0:33:35:29:4e:50:f3:ce:f2:dc:0f:24:a7:14:
fc:3d:25:0a:46:fd:2c:3f:f7:56:22:cd:35:aa:4a:
4b:0e:ea:7f:d4:fc:8d:f9:5b:cb:c5:a1:03:a1:bc:
ee:4d:df:d4:60:ce:19:61:84:b7:2f:7b:b9:2a:24:
36:85:d0:04:a3:1a:bc:20:00:ea:ca:11:e0:ad:bd:
82:36:b3:5a:e9:cb:ce:8f:08:bc:06:92:2f:59:92:
9c:79:d1:86:4e:5c:f5:43:b9:14:41:ed:6f:ff:14:
25:49:d3:8c:2b:91:64:4a:86:74:b9:38:5b:dc:80:
8e:cd:8f:06:ed:0e:cb:7c:65:e7:05:e7:2a:7e:ed:
61:df:58:c7:fa:5d:b4:8c:43:af:bf:fc:c0:99:b2:
89:b3:a8:8a:81:70:8f:fd:8b:b5:08:9d:ac:70:5e:
4f:a9:e3:27:52:cf:77:c1:39:67:7b:62:88:7d:3e:
66:64:01:79:3e:e0:c3:bc:83:e9:9e:5d:81:e2:1e:
7f:6f:89:3e:a9:d4:ce:66:35:3b:97:c1:82:24:bd:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:4B:C7:D4:32:82:E2:AD:41:3E:1D:DF:D4:D1:15:7C:55:26:3C
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:62:c6:d4:4d:e7:a3:4a:ed:b3:5f:a2:17:08:50:d0:09:
d6:17:90:b7:13:29:1c:d6:c1:69:35:43:1e:a3:76:fa:68:e8:
e9:56:e9:62:cb:01:3b:f4:40:50:b5:cd:a7:24:9f:1b:84:94:
44:c3:a6:9b:b5:06:ff:fa:3e:22:13:25:f5:f4:ff:73:f6:cb:
e7:a3:29:05:fa:01:8b:0c:c3:bd:15:21:29:35:f3:4c:0e:61:
94:32:09:70:71:32:3c:50:fc:b7:1a:f7:c0:b3:08:5c:44:bb:
0c:b8:51:bd:70:cb:9e:d3:e7:7c:bf:f8:ae:a8:1d:7a:55:4d:
bc:9d:fd:3d:e7:61:45:42:0c:93:32:e2:33:33:a5:9c:cd:53:
46:4f:ea:bc:12:01:b7:2b:c0:b6:6a:31:66:95:6b:2d:df:a0:
56:a3:8c:81:23:13:a9:0a:be:4b:11:d0:6d:34:44:a4:0f:a1:
93:e6:3e:f3:ff:c4:dc:19:80:79:8c:ae:1f:6a:9b:12:13:b3:
37:2c:68:e9:b0:eb:1d:91:1d:29:4c:46:82:71:fd:70:f7:40:
4b:66:0b:74:c7:a9:b8:d3:54:35:f8:95:cb:d6:e2:eb:79:05:
4c:6e:29:a2:98:4e:a3:a9:72:ff:fb:83:94:08:3e:f1:a4:ed:
e5:e4:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:34 2025 by rpki-client