Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: l8DiE+wKj8gB9OOOtrnFJ3GUPwnlu+lzvaiojxyZyFg=
Subject key identifier: 86:FE:0B:0C:45:D2:66:4D:C6:B5:83:A1:C5:C2:EB:15:D9:F8:A1:B7
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 01977308795BED1142581AE552DC0C28769C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0C5E
Signing time: Sun 15 Jun 2025 10:00:24 +0000
Manifest this update: Sun 15 Jun 2025 10:00:24 +0000
Manifest next update: Mon 16 Jun 2025 10:00:24 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: W8b/6KLTnWeY3fuhLGKz7o1sq1NMmnHmgRc88kMQ4as=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:79:5b:ed:11:42:58:1a:e5:52:dc:0c:28:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Jun 15 10:00:24 2025 GMT
Not After : Jun 16 10:00:24 2025 GMT
Subject: CN=86fe0b0c45d2664dc6b583a1c5c2eb15d9f8a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5b:f1:58:71:4e:fe:32:2b:10:ca:35:8a:69:
82:80:39:ec:ea:7a:c0:36:b7:90:3c:f3:f2:bd:8d:
56:af:2d:6e:41:c5:da:3e:2d:62:18:9b:36:33:fb:
1b:00:4d:d1:54:5f:c5:da:39:a2:2a:e4:92:a4:33:
b8:7f:0f:11:15:66:b6:0b:cc:07:86:40:b9:3d:49:
78:91:32:d6:33:c0:96:71:c5:c4:a3:0e:4c:0a:8b:
d3:3b:3a:04:0b:17:3c:b5:0e:c4:8c:15:d3:61:ce:
3c:dc:0e:85:fb:99:05:f3:fe:24:8c:4f:46:62:9f:
37:ac:93:20:8c:bc:dc:dc:b2:1c:d2:2e:7b:cf:da:
ed:98:05:da:20:9d:5b:96:35:36:e4:be:a4:74:8b:
ab:92:df:cc:15:e1:95:fe:8d:1f:8a:d5:15:0d:92:
31:31:a6:7d:24:0a:7e:36:bc:0f:76:9a:c8:2c:52:
1e:a6:1d:e8:e0:37:47:d0:bb:54:ed:5c:e9:ad:c9:
85:0e:9f:75:90:4d:a0:78:7f:02:1d:bf:95:38:ab:
31:4b:6b:18:90:2f:68:31:6e:52:8c:12:d0:ab:cc:
82:69:aa:dd:67:fa:99:74:b1:cd:bf:b8:a4:15:4d:
2b:12:9e:0c:66:7f:a1:32:c8:45:c4:89:2e:e6:72:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:0B:0C:45:D2:66:4D:C6:B5:83:A1:C5:C2:EB:15:D9:F8:A1:B7
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:48:3c:c1:d9:ba:fe:53:bb:5d:6c:42:21:9d:1d:c8:ed:
d1:af:28:63:94:46:80:c3:6a:d7:25:d8:28:41:60:81:85:a5:
b2:d5:5e:9f:b2:ea:d1:12:2e:1c:e1:04:d8:57:08:97:22:93:
4a:84:43:10:cc:3a:ee:ae:3e:3d:3e:b4:1d:b2:29:49:ae:2c:
11:cc:62:cb:a7:9f:5c:69:d8:d0:d1:57:81:8d:04:1c:a2:09:
b4:0e:f3:5f:93:12:54:47:24:88:ce:91:54:63:5d:23:a9:76:
ec:75:8a:bb:89:1a:f7:37:e2:85:d2:8a:ef:47:96:b9:92:e3:
ff:9b:a0:d4:af:f7:24:43:c2:e9:d1:89:2e:eb:4d:8a:52:81:
a5:5e:37:f5:fc:f0:7f:b4:f6:19:c5:0e:62:83:8e:60:50:b7:
6b:bb:d4:50:21:61:5c:40:d0:7f:a1:86:48:14:5e:cb:f0:4d:
03:b2:b8:5e:8d:6c:3c:79:0c:27:78:5b:62:99:bf:e4:78:4c:
90:e2:fe:ed:55:dd:df:32:83:79:fb:df:9e:38:f2:fb:cd:b4:
31:55:be:4c:2f:03:cd:4f:94:a5:ac:b5:00:c6:22:2e:43:19:
12:71:bd:9a:82:4f:81:4b:80:90:9d:eb:f4:50:a6:b0:46:b4:
4d:e1:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:32 2025 by rpki-client