Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: NKe+mLrwrNOE4XSp3z/fDXMIJpa280cwMKqLUhspImc=
Subject key identifier: 4D:0E:D4:3A:1E:71:10:93:AB:D1:57:59:1D:23:8C:FB:90:48:20:2F
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 0197790A9527A0856BB45F0D108BCA469931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 14:00:25 +0000
Manifest this update: Mon 16 Jun 2025 14:00:25 +0000
Manifest next update: Tue 17 Jun 2025 14:00:25 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: 8B2LaqM9W5pVSTLfRZCUoDGstR1Htsacycmo5YRDdlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:95:27:a0:85:6b:b4:5f:0d:10:8b:ca:46:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jun 16 14:00:25 2025 GMT
Not After : Jun 17 14:00:25 2025 GMT
Subject: CN=4d0ed43a1e711093abd157591d238cfb9048202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:d0:25:cf:ab:eb:8d:58:9d:46:38:eb:3b:
c2:b0:f6:55:07:ea:05:45:71:18:7d:3f:a5:df:b2:
05:ac:ef:5a:60:1f:b3:02:6e:de:1e:0b:3d:17:66:
e8:3f:8e:72:50:e5:8a:03:13:a4:e8:1b:28:22:75:
18:b7:2a:bd:cb:e9:b6:ad:27:46:d9:40:ba:9e:2e:
e6:15:a4:16:8d:78:75:55:38:bf:b0:ca:50:86:85:
58:f3:fc:ea:47:22:73:1d:0e:ad:e4:c3:31:ca:78:
4a:32:47:4a:c0:47:c8:50:6c:68:b7:17:92:36:19:
5d:fc:f0:0f:dc:06:9c:9c:b9:77:f8:a8:4f:8e:27:
7c:f7:1a:3e:c6:ca:c4:4b:ec:23:4f:33:6d:0b:1d:
f3:20:a2:75:85:ac:91:c6:07:b4:8b:4e:84:34:2c:
99:29:fc:3b:e2:ef:15:6a:e3:83:ed:46:e1:a3:4e:
fa:5b:e8:10:a9:bd:c5:0b:ec:ab:a1:f7:f9:b5:99:
92:86:be:32:9c:e4:8e:15:e9:0d:5a:d8:23:66:9c:
8a:73:9d:ec:e6:d5:c8:ac:54:3c:18:b2:ea:fc:bf:
d4:9e:16:0c:19:ed:a3:08:da:4e:ce:13:b9:39:40:
7d:90:d0:dc:af:c0:ae:7a:ee:33:7c:47:8b:40:09:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:D4:3A:1E:71:10:93:AB:D1:57:59:1D:23:8C:FB:90:48:20:2F
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:16:e0:4a:57:55:ee:92:8d:ff:96:2a:bc:bb:89:52:a2:7c:
8c:75:47:8f:f5:0d:31:81:64:7a:0a:1a:d7:1f:99:a2:80:cb:
65:4e:33:fc:42:d0:82:42:6f:a7:ae:93:62:fd:09:92:98:bb:
a3:26:a6:dd:78:aa:6b:65:9b:e6:52:da:3f:1a:33:db:a0:c4:
17:76:46:d0:24:87:6b:8f:aa:a7:b5:ce:a0:3b:5e:b6:63:87:
42:f9:fc:3a:74:18:51:5a:65:fe:ea:fd:d5:83:06:8d:86:e6:
cf:c5:dd:5e:93:8b:a8:3c:e1:65:af:05:21:78:fe:55:40:39:
29:82:c5:16:94:cc:bd:7e:6f:d5:31:39:cf:67:9a:ec:ab:5e:
52:81:28:3b:1e:3c:4a:b1:ab:b6:eb:56:51:ab:e8:eb:80:cc:
6a:5b:a5:28:58:1b:a2:51:72:27:bf:86:36:d3:2e:89:40:65:
92:00:e2:d9:02:3a:0a:b5:8c:d8:df:d8:b8:59:a4:74:96:04:
f2:7b:12:7a:e6:fd:a1:79:51:8d:a5:8c:41:a4:cb:21:34:46:
04:34:ef:51:b7:b1:f0:f6:4c:cb:58:91:9e:3f:a5:66:74:1b:
dc:b9:2d:47:a0:fe:ce:4b:ad:17:cd:ff:01:14:a5:2b:20:31:
65:63:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:47:50 2025 by rpki-client