Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: Sdd/5I4UiSiOtr8LmfX81EXb9Se1XK552H/7ZjmbtiM=
Subject key identifier: 6E:2E:8F:6F:41:DC:52:78:6F:83:D0:92:05:AC:1B:7D:ED:4B:B1:66
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 01977DFA0F664ECBA3EF7CE9B2FF1E86069E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 0F15
Signing time: Tue 17 Jun 2025 13:00:29 +0000
Manifest this update: Tue 17 Jun 2025 13:00:29 +0000
Manifest next update: Wed 18 Jun 2025 13:00:29 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: SHNewaDNS5oV7zyC8X/o8xhVlii44ef/7mVtGIwMk4o=)
2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:0f:66:4e:cb:a3:ef:7c:e9:b2:ff:1e:86:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Jun 17 13:00:29 2025 GMT
Not After : Jun 18 13:00:29 2025 GMT
Subject: CN=6e2e8f6f41dc52786f83d09205ac1b7ded4bb166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:92:45:7c:78:8c:3a:61:44:33:0e:c2:34:
4a:48:da:c7:c1:16:e4:2f:ad:85:2e:b0:0d:c7:93:
b0:c8:e5:26:ca:65:c1:c2:2f:9e:16:3c:e3:6a:da:
3c:4c:18:e1:35:4c:e7:30:c7:38:fa:32:92:80:63:
0e:09:34:13:f9:4f:1d:f3:8c:25:7b:a8:13:68:82:
c8:7c:d5:25:b5:24:86:6c:34:1e:3d:f4:28:0f:f2:
7f:4a:61:9b:70:94:a2:7f:0b:c3:41:ef:07:b0:94:
fa:e5:b9:ae:6c:5c:e3:63:3e:25:69:0a:c9:dc:32:
0c:b7:2d:f8:fd:df:64:d6:1a:ac:91:5b:6f:67:92:
33:6c:ba:d5:57:da:e9:ec:81:6a:25:b7:7d:4a:50:
5f:c9:c9:24:f8:78:f7:05:6b:6e:c7:55:bb:97:e9:
80:b8:49:d5:a5:a3:d4:72:35:41:c9:93:02:eb:3e:
7c:7f:d9:35:92:06:bc:f7:11:f2:77:1e:d3:be:b8:
1f:8a:44:8a:41:c4:9e:38:ef:28:b7:f9:59:fc:9a:
9f:dd:f3:3b:8c:45:45:6b:40:72:9e:02:01:bb:46:
ca:fa:06:bc:a5:b8:64:b2:54:b2:0e:89:42:45:ea:
dc:01:b8:fc:ce:0c:e0:d0:0d:7e:a6:04:e7:fe:c9:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:8F:6F:41:DC:52:78:6F:83:D0:92:05:AC:1B:7D:ED:4B:B1:66
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:93:9e:8a:ab:08:f0:4a:dd:ab:0e:2c:d6:59:15:2c:d6:
ea:3e:a6:18:53:69:0d:9c:6c:b0:3d:90:a1:ea:65:2b:77:7c:
94:97:ac:c6:59:18:21:f5:dc:60:64:23:03:8c:9a:d8:1d:e4:
af:f5:8f:5b:d9:0d:b2:f2:12:06:3b:a1:60:ad:86:c9:94:db:
f6:86:b5:be:1f:26:96:f3:c0:4d:84:c6:76:15:e0:f7:e0:f5:
16:9b:80:8a:52:2b:96:5a:37:b3:77:cc:79:c1:6c:ed:18:b5:
32:98:18:63:57:67:62:f4:41:a8:07:41:2e:11:28:74:e5:b5:
36:b6:64:7c:29:7f:be:4d:a5:c1:42:8c:b3:7c:56:77:3a:3f:
d1:c8:cb:a7:42:da:1d:f1:b1:46:9a:8b:dd:ee:18:d6:16:fa:
99:78:67:00:d8:e1:1f:37:9e:86:56:57:95:3e:d0:fd:17:e1:
d6:79:34:25:92:54:32:da:e1:34:c8:72:95:6e:74:75:09:66:
51:12:a6:fc:13:56:0e:6f:3d:59:8a:0c:da:96:05:a6:4b:21:
99:33:e9:53:9a:d0:4c:94:8f:08:32:49:ce:da:b7:f9:d8:cc:
99:73:f5:d6:35:a7:44:d5:e2:1b:5d:14:13:1b:a3:a5:fc:34:
19:88:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:13:44 2025 by rpki-client