Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: ovxsRCCplpEqpwTkHjsSDI1/wOE3vIhyR4oW4n/Vf/4=
Subject key identifier: A6:8D:B7:0F:F4:1F:E4:DE:11:74:FF:1F:8F:B8:85:66:C2:09:BF:35
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 019779AF75E7B45FDFAC0DFE38E78BF00D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 14E3
Signing time: Mon 16 Jun 2025 17:00:31 +0000
Manifest this update: Mon 16 Jun 2025 17:00:31 +0000
Manifest next update: Tue 17 Jun 2025 17:00:31 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: CFIFmZ8NfUsBqCS2t332fd3qRMAB4RVfY9AkILgVnrw=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:75:e7:b4:5f:df:ac:0d:fe:38:e7:8b:f0:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jun 16 17:00:31 2025 GMT
Not After : Jun 17 17:00:31 2025 GMT
Subject: CN=a68db70ff41fe4de1174ff1f8fb88566c209bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:6b:eb:74:c3:a5:ce:6b:e2:cd:29:5f:d1:
3c:9b:91:18:2f:5f:bc:21:13:c2:94:21:45:65:32:
2a:e3:53:51:20:ad:20:6f:ca:00:03:26:76:31:cf:
c2:54:4a:54:c9:0d:f2:35:a9:1f:64:29:49:8e:19:
dc:f2:7f:b9:38:44:9b:30:b8:84:48:80:a3:ed:be:
c0:3f:af:97:4c:60:f4:d1:32:b3:8f:7c:23:5b:e9:
65:36:1b:f5:c1:1b:bb:54:22:6c:bf:66:6f:70:9a:
ae:5a:9c:fd:40:81:18:2e:27:c5:05:05:b5:86:94:
43:07:77:2e:81:e9:9c:a8:07:e8:95:54:11:99:f2:
98:bb:53:b5:e8:30:58:56:65:a8:8a:d9:6d:71:93:
45:c9:8d:bd:f0:af:f1:23:c2:7c:ca:a3:62:3a:49:
14:7a:f9:36:c7:14:53:ef:79:36:41:f9:84:98:7f:
b0:a1:b4:11:c1:1c:76:e8:32:bf:95:17:6e:a5:6c:
51:dc:5f:da:ee:a9:83:66:f7:81:fb:44:a1:87:36:
97:5c:b7:20:53:fd:d2:d0:26:ba:b5:f5:14:9a:7a:
82:3c:67:25:4f:36:3a:1b:aa:fd:0f:e6:30:4a:c4:
a1:9c:e3:7b:12:a3:02:b1:6a:c8:e8:c6:05:07:16:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:B7:0F:F4:1F:E4:DE:11:74:FF:1F:8F:B8:85:66:C2:09:BF:35
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:0f:69:8e:97:15:49:5c:fa:0b:2d:10:53:98:83:25:d7:
09:41:b7:4a:73:d5:ce:c9:c5:68:fd:bf:47:ed:33:db:c5:9f:
74:ef:a3:91:e0:6c:37:c9:be:d8:2a:9a:b0:fb:96:86:62:74:
38:46:c6:82:ec:6e:ce:4a:c1:5c:29:3c:39:3d:24:17:1f:56:
c5:2a:52:bf:5f:b7:1a:97:08:e1:7f:29:bc:f1:f8:60:46:05:
f3:2f:4c:72:d1:33:d4:e8:5a:2a:8c:70:24:e9:60:84:7f:fc:
19:ac:c7:7d:fd:3b:11:03:25:3a:68:9e:38:32:2d:98:6c:11:
f7:fd:20:33:c0:d4:4a:63:d3:3e:dc:25:cd:ce:16:7c:e9:fe:
16:60:37:0a:34:1d:73:a9:28:e2:ae:e9:10:55:25:20:e3:40:
84:79:50:ad:b2:74:6f:73:3e:eb:e2:11:18:a5:ff:a7:c6:e5:
26:86:f1:ba:c0:9b:00:c8:ad:1d:ff:57:9d:70:71:64:18:9e:
e2:cd:0d:d8:bd:51:40:25:d7:fc:48:38:0c:13:49:08:74:20:
1e:07:24:19:2e:6f:34:d1:15:cb:3b:ed:b2:b1:da:a5:9d:cc:
23:85:fd:68:3c:57:c9:f2:50:99:af:fe:11:bc:78:e1:a0:30:
5c:bb:dd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:59:13 2025 by rpki-client