Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: NOkWeOH+xZTLnlE8Nw0u8pDN41AQioiZop+hwANXvhQ=
Subject key identifier: 39:07:2F:4D:9D:D5:73:48:39:AD:C6:1D:A8:6F:A2:97:27:6A:2F:E4
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0197684DF47BB2F3C1259CA8696CCECF1F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 08:00:28 +0000
Manifest this update: Fri 13 Jun 2025 08:00:28 +0000
Manifest next update: Sat 14 Jun 2025 08:00:28 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: tsMRqYqlOz0bYrEvIHpazRvUBdEhf2cSjKQIhJxCsek=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:f4:7b:b2:f3:c1:25:9c:a8:69:6c:ce:cf:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jun 13 08:00:28 2025 GMT
Not After : Jun 14 08:00:28 2025 GMT
Subject: CN=39072f4d9dd5734839adc61da86fa297276a2fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:7d:d7:47:cb:bd:3e:bd:04:94:24:a1:20:
6b:77:a5:44:50:f5:4d:9a:07:70:cc:60:4d:80:a7:
b1:5c:1b:e7:b4:50:21:09:ca:86:96:61:9f:99:fd:
16:63:ad:f7:b9:94:af:5a:f5:99:76:62:76:47:69:
9c:bb:a9:b4:ae:b9:de:6e:46:04:8a:07:76:75:e4:
4f:39:20:c3:42:3e:bf:71:81:17:e6:f4:ee:89:a1:
ac:34:5e:31:1e:05:93:23:e8:69:f0:1e:0a:b2:1a:
f3:5a:03:d6:70:b2:71:35:83:a0:8a:5f:24:ed:63:
52:66:80:03:d2:ec:4e:43:11:ae:95:28:25:a7:1b:
ae:ca:67:4a:3c:11:68:29:f8:ea:e4:8b:da:eb:d6:
e8:28:59:b5:9b:d6:5b:27:25:65:2e:15:64:f9:4a:
1c:77:df:f3:2e:8c:9c:77:e8:2f:23:71:65:93:e8:
57:a2:25:c0:65:7a:e3:e6:7a:a9:2b:9f:0e:dd:f9:
4a:11:06:ba:07:7c:a5:09:f0:61:a9:f4:50:d3:c1:
12:65:ec:87:bb:72:8f:07:06:7e:81:64:e6:98:70:
19:ed:eb:96:2b:e8:7b:52:7b:92:91:71:c5:e3:28:
22:c0:99:16:08:cc:69:7e:8c:f7:40:3c:28:87:dd:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:2F:4D:9D:D5:73:48:39:AD:C6:1D:A8:6F:A2:97:27:6A:2F:E4
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:e0:19:c5:b7:ed:ee:f8:5c:a1:e1:cf:55:f0:c6:0e:da:
5a:66:12:96:86:e3:04:29:dc:1a:f3:26:7b:98:fa:ca:6b:be:
96:49:e9:39:36:34:01:6e:94:19:51:27:bb:aa:65:bf:97:75:
38:e4:50:d9:38:aa:0c:d8:5f:07:4e:c9:96:d6:fe:0d:80:fc:
db:73:23:41:44:23:76:bb:85:8b:77:82:41:7c:b2:e3:28:fd:
16:91:c4:96:d5:14:14:23:f9:74:16:3c:02:8a:e8:0f:46:9d:
be:5e:9a:81:03:cd:96:b7:63:e3:22:7b:2a:7d:e4:92:94:b0:
d9:98:57:c5:59:34:1b:d9:38:e1:3c:76:8e:ec:4e:7f:86:9e:
e9:d6:9e:ee:fe:df:8f:61:87:5b:fd:a4:04:82:7e:30:6a:79:
9e:32:d0:58:af:05:cb:47:cf:e8:ab:e8:6e:cd:cf:17:4c:95:
74:d5:fa:7d:29:7f:70:99:fe:4a:cc:76:5c:14:7b:4b:bb:5f:
2a:51:41:65:4b:87:18:65:e5:62:5d:68:d0:e7:66:a6:8e:c0:
69:0a:05:4e:5e:22:93:cc:ec:9a:c6:9b:0b:24:19:63:e2:31:
0e:8e:09:53:32:9c:fb:e4:2d:e6:f1:07:04:1d:04:bc:c1:0d:
71:55:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:33 2025 by rpki-client