Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: o6jp3t8qK8gLsqaZcj6pH9XonxyfOvATIBVNZdacE/U=
Subject key identifier: 62:E5:1C:E6:D4:7F:93:A8:51:8A:82:8B:CA:09:62:28:D0:86:3A:E2
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 0197771C8ECCC6C2472E2042F8E1C9B38DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 0416
Signing time: Mon 16 Jun 2025 05:00:49 +0000
Manifest this update: Mon 16 Jun 2025 05:00:49 +0000
Manifest next update: Tue 17 Jun 2025 05:00:49 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: 9CbtCa7n/+RG6aTKGPPUcG1sc9pNf8CSpAEnce4elpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:8e:cc:c6:c2:47:2e:20:42:f8:e1:c9:b3:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Jun 16 05:00:49 2025 GMT
Not After : Jun 17 05:00:49 2025 GMT
Subject: CN=62e51ce6d47f93a8518a828bca096228d0863ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:2e:8d:03:a3:db:a0:ee:d5:30:cc:a6:82:
c2:da:23:1e:23:d4:b0:51:7f:4b:dd:63:ca:17:0b:
34:de:8d:6e:13:42:70:be:6a:0f:8f:34:0f:58:38:
0a:5f:f6:30:b5:a5:e4:7f:c7:24:d5:b9:04:c6:cc:
90:a3:84:12:82:2c:3d:76:45:82:08:a2:55:0d:64:
0a:b2:cf:e6:47:f6:dd:dd:a4:ce:6f:2f:12:60:1d:
8b:ff:db:27:f2:54:4f:2b:d8:e1:61:c8:e0:8d:c0:
94:a4:27:3f:1c:8f:e7:ff:ae:60:20:e3:2b:05:8b:
5b:50:b1:00:22:bf:71:35:db:c3:bf:8b:af:eb:eb:
07:fb:a5:7d:c1:41:73:b4:2d:f8:8b:ff:66:4e:f1:
dd:6e:56:e2:91:df:df:7c:b1:ea:d2:e2:32:32:97:
22:23:3e:3d:b3:3b:7c:6f:b3:25:83:a3:39:85:f4:
62:43:f6:1b:39:ee:23:78:9d:5b:26:41:10:53:32:
79:76:81:ab:6d:d6:79:fb:b1:94:99:2a:7b:60:35:
22:e5:14:96:2d:2b:a9:dc:41:22:c1:37:95:f4:4d:
9b:fe:80:e8:91:7b:f5:88:c2:27:a5:16:1b:00:73:
40:bb:8f:2b:cc:48:0e:6a:d9:13:36:58:28:3a:49:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:1C:E6:D4:7F:93:A8:51:8A:82:8B:CA:09:62:28:D0:86:3A:E2
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f3:9a:e0:78:87:ca:a5:8c:b1:76:8c:f1:86:d2:64:69:4a:
19:d7:4b:cf:22:c8:22:d0:94:f9:89:ff:e8:d6:b0:3b:c1:99:
13:06:36:20:42:f8:5d:cb:c2:e7:8a:f9:a3:6d:4b:80:6f:1c:
0f:60:14:dc:3c:9f:85:ce:5e:3e:69:4e:db:4e:fc:ff:24:85:
6c:42:cb:3c:39:83:75:fd:1d:ff:eb:6a:6f:38:2f:da:13:bb:
29:34:04:2a:21:81:c8:f7:2d:c7:95:42:37:c8:40:db:33:63:
79:ba:78:cb:66:58:b0:8f:a5:dc:6f:41:c3:73:b0:a1:07:d1:
8d:8d:5e:7a:6d:9e:d6:ab:eb:57:e3:3c:7f:b0:4b:7d:3c:31:
6a:c5:21:ab:51:bb:02:b8:23:9f:89:7b:90:92:9b:7a:9a:34:
bb:37:a5:f9:39:21:b5:8f:15:6e:e6:79:3d:e1:bf:76:0e:5d:
27:5e:73:f4:3a:ad:ac:0a:a8:64:41:0e:23:1d:13:c5:63:58:
04:73:c3:ee:4d:48:ad:b0:a7:71:04:b5:fc:f6:b1:f8:e1:83:
9b:b3:ea:b4:5a:98:be:92:31:ed:f5:dd:5f:49:5e:7e:7e:f4:
7d:f3:aa:53:66:1a:ca:32:a4:41:fd:58:99:ed:ec:bd:cc:8e:
fb:88:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:06:02 2025 by rpki-client