Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: /pSR2kb+Uy4vqgxqOE0PY8HYn6xzpzellIr3aAFInr8=
Subject key identifier: 48:71:F1:C4:C4:1F:2B:4E:44:A0:5C:88:C7:28:41:C2:3E:71:05:56
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019771512D67DE14B8F1651FE71E8C4D76FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0B96
Signing time: Sun 15 Jun 2025 02:00:34 +0000
Manifest this update: Sun 15 Jun 2025 02:00:34 +0000
Manifest next update: Mon 16 Jun 2025 02:00:34 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: 0XTV3WVcBylXvaA1PgYzLcjevsD/4cjX0k+VfEM2Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:2d:67:de:14:b8:f1:65:1f:e7:1e:8c:4d:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Jun 15 02:00:34 2025 GMT
Not After : Jun 16 02:00:34 2025 GMT
Subject: CN=4871f1c4c41f2b4e44a05c88c72841c23e710556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:1a:74:09:d3:c1:25:12:3f:f5:c8:83:dc:
4a:ca:8f:03:bc:15:72:90:1b:a6:a0:d6:91:04:77:
ca:08:bc:b8:24:04:5d:10:80:74:e4:5f:73:59:0f:
e5:39:86:72:23:f8:1e:6d:3a:fa:24:3b:fc:af:f4:
9e:b3:57:8f:fd:94:02:d1:78:90:2d:4d:c5:f7:f7:
6b:e1:4a:ea:04:bb:a8:39:c3:70:c5:c0:e5:5d:90:
86:81:fd:43:e5:ba:b9:1d:51:63:7d:54:7c:78:59:
b2:d8:dc:e3:95:51:a0:8a:c9:aa:90:3c:7b:65:1f:
e8:b1:ff:28:45:87:82:ab:82:8b:f0:f8:66:63:76:
a3:fa:bb:40:0d:77:e8:b7:7f:f5:b9:9e:e4:fc:6a:
b6:55:63:07:52:54:02:00:d0:b3:86:86:cb:cb:4b:
34:e6:62:6e:a1:f2:c6:67:b8:59:de:26:d4:38:ad:
e5:21:04:82:f5:46:5d:29:df:b8:d3:e8:90:14:d6:
ce:54:e7:c1:94:45:e0:47:70:da:bf:be:c9:fb:1b:
76:d8:f8:bc:c0:c4:c4:48:3c:2b:fc:40:2c:a7:32:
dc:a7:b0:4d:a9:ac:ec:3d:b8:a5:ea:84:f4:09:31:
3f:30:79:af:1c:7a:bc:3c:b4:3e:77:ff:a9:a6:e7:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:F1:C4:C4:1F:2B:4E:44:A0:5C:88:C7:28:41:C2:3E:71:05:56
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:40:7f:ec:af:4b:ae:c2:9e:13:e6:5a:08:c7:4a:3b:eb:
53:69:f1:f4:bb:55:68:85:ed:ec:de:fd:74:61:66:c3:8b:28:
cb:fa:94:f1:00:1b:e9:34:1c:8e:8d:e5:d3:13:8d:c2:74:46:
ff:4b:37:60:de:c2:1e:fd:d1:4e:cd:2d:14:de:62:26:24:be:
68:6d:82:97:81:69:ef:c7:e0:fa:64:b7:cb:4f:80:65:1a:84:
60:bf:f0:07:e7:5b:cf:f3:ce:f8:2e:83:58:6f:29:e8:eb:12:
72:73:44:7a:8e:fe:1c:c8:15:c6:b9:94:b5:87:35:ac:07:88:
38:03:99:d6:3a:a6:28:bf:56:c7:f4:b8:cc:33:88:b3:32:8f:
da:73:40:7b:1e:74:11:4a:49:cb:56:90:1b:fa:9a:7e:48:26:
5f:bb:da:95:4c:e3:e7:06:f9:a9:50:2d:bd:c8:3e:ae:7d:08:
3f:28:34:b9:8d:81:2a:47:0d:be:7b:6c:3a:99:36:2d:ae:59:
e6:d5:7d:19:a2:2b:00:4b:e2:2e:26:36:28:fc:6e:83:27:8e:
0c:2a:d8:07:05:1c:39:9a:89:15:00:0f:b7:66:3b:17:a0:d0:
e0:84:10:55:3a:7c:af:ca:7d:2c:2a:ac:52:b5:c1:46:00:e3:
20:07:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:02 2025 by rpki-client