Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: k0u3ZRYlMLevCO9eWyE4m45d1Dz3naFV1hvQzh3OV1k=
Subject key identifier: 08:41:FA:88:2D:A4:37:A1:4B:82:A3:21:E8:8D:19:F3:0B:15:79:46
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 019771BFBA6B079C713064071B37087E1E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 11A1
Signing time: Sun 15 Jun 2025 04:01:19 +0000
Manifest this update: Sun 15 Jun 2025 04:01:19 +0000
Manifest next update: Mon 16 Jun 2025 04:01:19 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: czAHJFzlh3+H84WRfTxrIWTxbn23/Cr2CFabpywTwkM=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:ba:6b:07:9c:71:30:64:07:1b:37:08:7e:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jun 15 04:01:19 2025 GMT
Not After : Jun 16 04:01:19 2025 GMT
Subject: CN=0841fa882da437a14b82a321e88d19f30b157946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:c0:f4:6a:91:66:3a:74:d3:e4:6a:59:c8:
a1:73:b3:66:f4:d8:17:a4:d5:06:b7:84:1f:b4:0e:
69:3e:98:34:0e:db:9a:34:ca:0b:37:97:84:5a:9f:
9a:a3:63:b7:0a:26:b7:a1:17:94:ff:cd:45:f7:e3:
48:be:1e:13:b2:83:8c:ad:f2:64:c0:04:8c:ae:4f:
4c:d0:42:f4:b8:f9:80:49:0b:97:28:5c:fd:a2:1f:
43:08:7a:f2:30:8e:08:03:dd:15:ec:f3:8b:6e:32:
0b:7c:dc:59:92:46:72:8c:9f:38:5a:e7:75:56:a4:
f3:2e:1e:f2:be:61:b0:c4:f9:09:16:15:7b:28:53:
9b:74:6d:7a:ee:37:28:5a:17:5c:7d:07:81:b1:86:
4a:cd:6b:d0:c3:bb:bd:bb:45:45:82:c5:72:71:92:
17:70:fd:e3:c7:a3:a8:17:9e:2d:e1:21:09:4b:25:
d4:df:55:b2:2b:90:f7:f9:43:95:65:8a:e5:5e:17:
28:95:53:c0:7d:55:98:5a:1e:bf:fd:26:ce:5d:4f:
70:ac:1e:dc:4b:a5:55:ee:b5:2a:13:93:ca:5c:d8:
a8:50:9f:52:c3:d8:59:f8:5d:ce:df:c9:e9:8a:c1:
f2:ce:9e:13:a7:8a:96:6f:d3:fe:86:a3:95:e9:68:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:FA:88:2D:A4:37:A1:4B:82:A3:21:E8:8D:19:F3:0B:15:79:46
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cc:82:74:f4:0e:3a:63:d8:44:b8:68:80:d7:16:02:8c:75:
33:1c:2a:91:e1:73:39:ee:d2:6a:90:4f:05:92:d0:35:ce:57:
b0:b9:7e:5e:60:e8:41:85:48:47:32:d6:b5:c9:0c:77:54:9c:
fc:60:79:1d:8b:7a:f5:ff:78:7b:ff:de:4c:f9:6b:19:63:31:
40:2c:6f:07:05:21:89:d7:b8:ce:10:7a:fc:a5:4f:27:33:47:
95:08:73:c1:e8:38:c6:af:27:5f:98:55:6d:1a:94:6e:49:13:
a2:00:f0:12:87:3f:c4:26:fc:16:cd:f1:81:8e:c7:86:85:8f:
82:df:2f:90:da:d4:cb:5c:2f:7d:b6:60:d9:b7:96:c9:66:3e:
64:0b:5d:34:79:3d:6c:5a:d1:01:09:65:d2:40:fc:77:ed:31:
04:83:14:c8:96:58:83:46:2b:17:0c:9a:35:ef:76:a2:ce:45:
1a:75:c4:e7:10:49:15:df:d9:27:fa:be:de:2b:77:06:6c:61:
b1:a3:3f:06:9d:bf:6a:9d:f2:18:99:68:09:29:17:12:59:12:
8b:b0:9d:02:b3:97:7a:59:79:19:6d:b3:d4:45:3c:a3:9e:36:
12:eb:6e:85:95:75:f3:1b:15:ca:40:a8:d5:a1:42:d3:10:8b:
d3:8a:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:56:42 2025 by rpki-client