Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: rslqzmyUqgFOk+ybxNXBNvcOoEAmPUqDZzdcOQ2soLI=
Subject key identifier: 4D:42:8B:94:4C:81:8B:40:4B:B8:ED:9E:4F:C9:8E:27:2C:C0:12:7A
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0197703E86F4FD7D70B72301098206BAE185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 068E
Signing time: Sat 14 Jun 2025 21:00:35 +0000
Manifest this update: Sat 14 Jun 2025 21:00:35 +0000
Manifest next update: Sun 15 Jun 2025 21:00:35 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: Y6kMDLfE8UZmKUrcYCeEOqsPqMYUIkEcSmSEeftLXzk=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:86:f4:fd:7d:70:b7:23:01:09:82:06:ba:e1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jun 14 21:00:35 2025 GMT
Not After : Jun 15 21:00:35 2025 GMT
Subject: CN=4d428b944c818b404bb8ed9e4fc98e272cc0127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:3e:ef:ce:f3:3e:8c:a8:49:0c:4d:79:b0:
73:b5:64:fa:b7:9e:a9:71:cc:fc:9c:67:6b:2d:5d:
41:51:37:b2:58:c3:de:52:4f:48:66:29:a8:7e:ca:
9c:e7:d2:03:33:5c:f0:d2:27:4d:e2:85:2a:74:84:
ca:72:f1:b4:b5:11:85:9a:98:05:fa:10:83:ff:8a:
0d:60:a1:d2:4e:0c:16:14:a8:56:3b:79:66:8d:b9:
f4:dc:08:74:96:50:4e:3b:ba:1e:16:54:61:f3:67:
b9:d6:7a:bf:8e:4e:d3:ed:7b:61:1b:65:2d:c5:bb:
09:b5:98:d9:c3:d3:fe:6d:5c:62:7d:4d:8c:2d:03:
7f:56:2c:0a:de:c8:4b:15:0c:ec:25:f0:71:74:e2:
bf:83:14:bf:91:10:38:14:60:47:f7:bf:9f:62:5f:
0e:65:ee:38:eb:4a:0e:58:e7:10:84:b9:1b:46:3b:
5d:57:e5:87:a2:3d:f5:1d:ce:73:56:be:ef:d6:e1:
b9:34:29:fc:f5:9c:1e:14:d1:03:6c:ed:58:7b:6d:
ce:5e:c3:17:a5:91:b3:5a:a1:66:65:02:89:ca:1e:
e3:e9:b2:e3:cc:3a:06:42:e6:de:97:8e:ea:9d:85:
22:a2:b7:4d:63:99:92:79:e4:1f:60:6e:0e:78:9e:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:8B:94:4C:81:8B:40:4B:B8:ED:9E:4F:C9:8E:27:2C:C0:12:7A
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:02:5e:fc:a2:0f:c2:9e:20:fc:09:e4:0d:72:01:bc:74:
7b:82:18:fc:7f:fd:cc:a7:92:dc:5a:f2:cb:ca:e4:4b:e8:fe:
e3:8e:53:25:6a:09:e4:f9:3c:f1:fb:9e:ed:f5:54:0b:36:9f:
3a:46:21:5f:47:33:66:b3:b8:d4:29:3a:a5:83:8d:4a:41:b1:
13:2d:f1:60:f8:6a:c6:93:08:bc:d4:17:f1:d1:52:54:3e:e6:
25:43:c1:80:b0:f1:dd:43:ba:b0:92:fd:42:4c:3c:42:1c:d6:
e8:51:f7:79:b2:09:d5:4a:5c:d7:42:2e:96:9e:a6:d0:28:94:
d0:eb:8f:41:5c:11:55:0d:67:f0:dd:29:dd:a4:c5:66:e1:11:
0a:39:66:29:19:ba:15:7a:7e:37:ec:8e:1c:4a:18:57:a8:f2:
e2:d4:68:14:8a:4b:e5:a7:36:a9:a2:d6:2b:81:9a:ab:25:cf:
15:84:87:2e:e8:c8:67:d7:a6:dc:a6:1e:03:d2:ab:17:2a:50:
c6:58:73:db:8f:d6:39:aa:3f:ca:77:64:16:14:b0:0a:50:d1:
58:00:a5:9a:19:5b:0a:1c:33:81:df:73:01:96:f6:a5:80:8b:
88:72:ec:f7:a7:dc:87:1c:7f:7a:ca:c4:e1:35:4c:64:4e:39:
8c:39:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:03 2025 by rpki-client