Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 2RcH0CBMjvhUMzRmFBmxcIGOQTMRXOKymySGuU2mIss=
Subject key identifier: 04:5D:95:FA:20:FC:7E:4C:45:74:EB:58:AE:62:19:97:D5:45:7F:09
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01978C91688938C2B842A413C2E44C6CBA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 04FA
Signing time: Fri 20 Jun 2025 09:00:29 +0000
Manifest this update: Fri 20 Jun 2025 09:00:29 +0000
Manifest next update: Sat 21 Jun 2025 09:00:29 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: RG7c+DY+mTV2IqnKPC1GI9p9fHedoTlEm01IHzonDQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:68:89:38:c2:b8:42:a4:13:c2:e4:4c:6c:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jun 20 09:00:29 2025 GMT
Not After : Jun 21 09:00:29 2025 GMT
Subject: CN=045d95fa20fc7e4c4574eb58ae621997d5457f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f9:4d:5c:80:88:d9:ff:22:d9:64:64:cb:84:
32:d1:d3:4f:6e:19:5c:0c:12:1f:7f:12:bb:3a:0b:
8f:30:2c:48:62:b2:e9:d6:c1:44:19:bd:80:46:2a:
da:bb:f6:99:8d:3e:59:bd:1d:f3:fd:1b:f6:d7:83:
2f:3a:65:70:dd:a5:ce:5f:b6:45:75:65:3a:53:8d:
19:c6:22:b2:93:12:32:70:67:a8:1f:15:7f:b9:91:
64:90:bb:fc:11:25:e8:50:8f:ff:67:99:40:1d:f0:
bf:33:89:4e:f0:ed:3a:73:37:6b:c5:77:bb:b4:17:
93:b8:ca:87:17:df:74:44:67:5d:44:61:14:07:80:
d8:53:03:87:3c:1e:62:a9:5c:0d:c2:d5:0d:7f:dc:
1c:a4:f9:66:e9:38:3d:ad:df:8e:a5:78:93:23:58:
8a:3f:2f:7d:88:89:e6:de:fd:04:76:e7:32:5e:e3:
66:cf:c2:07:03:24:ce:2f:db:9b:1a:c9:71:cb:fc:
b8:e5:c6:5a:e5:f3:3b:7d:d6:24:70:57:dc:39:c3:
cd:a8:3a:17:f1:85:f9:35:50:4a:39:ab:f4:71:eb:
59:b2:cc:ac:a9:0e:27:cf:fe:24:d8:63:27:d4:79:
5f:41:8a:85:5f:55:75:e5:c5:11:0b:db:2b:92:26:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:95:FA:20:FC:7E:4C:45:74:EB:58:AE:62:19:97:D5:45:7F:09
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:96:28:ee:53:f8:53:65:66:0a:cd:d9:32:53:c7:40:0f:03:
ad:89:c6:14:43:a9:e2:e6:8a:eb:e0:8b:59:f9:4f:a1:e1:a3:
ee:23:2d:4c:75:dd:4d:f6:ca:8e:ec:d8:f3:64:75:ed:de:45:
fa:f6:3a:7f:08:b6:43:a9:f0:47:88:89:54:a4:e2:43:12:58:
ea:f5:cd:ec:26:76:14:23:21:1d:a6:9f:bc:9b:15:b2:b6:e0:
b0:3e:1b:55:b0:45:3f:11:b2:df:53:ad:d4:89:0d:66:53:18:
34:07:4a:f4:d1:ab:7c:87:2a:b4:88:7d:33:42:85:ad:ff:6e:
24:54:4f:64:c1:58:2a:83:3c:8b:71:85:a1:f1:b4:89:8b:d3:
1a:49:03:d7:9b:85:64:d1:b4:b9:b1:8d:2e:f4:6c:23:69:20:
04:05:69:57:59:0a:83:99:67:68:9a:af:b4:50:b9:d5:cb:4e:
7d:c2:94:88:15:c1:fb:22:67:a3:c2:b8:9d:09:d5:58:38:80:
11:32:3b:e8:72:8c:f1:ed:92:c8:ac:ea:ce:b2:74:8c:bd:59:
42:8f:c2:89:ee:a0:6d:18:9d:77:a6:ef:df:f9:7c:07:1f:ac:
17:b7:ef:73:21:be:28:c2:80:78:d1:aa:59:52:30:01:01:1e:
20:fe:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:52:18 2025 by rpki-client