Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: cmjQlP3x20f4ZVCSz2nk4MT6cZewkdM4Ixd5jocK2zk=
Subject key identifier: 77:25:61:38:91:E2:43:A5:4A:2D:4D:1B:D0:B8:3D:BF:2D:E4:CF:6A
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019769CEF48E576FAA24D20C7F7839B706C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0939
Signing time: Fri 13 Jun 2025 15:01:00 +0000
Manifest this update: Fri 13 Jun 2025 15:01:00 +0000
Manifest next update: Sat 14 Jun 2025 15:01:00 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: SjQ14yESRGII7PT7XgsgJhakcsS09qBNKopjcbt5Ugo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f4:8e:57:6f:aa:24:d2:0c:7f:78:39:b7:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jun 13 15:01:00 2025 GMT
Not After : Jun 14 15:01:00 2025 GMT
Subject: CN=7725613891e243a54a2d4d1bd0b83dbf2de4cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:54:9a:e4:28:b6:64:a2:f3:8a:b0:9d:dc:
23:c5:7f:78:cc:57:63:43:78:47:d0:61:3f:54:a4:
2a:48:98:51:63:39:36:42:b0:f0:cd:70:3d:e9:76:
91:de:58:84:59:e0:16:be:58:20:bc:42:6e:cc:20:
9b:88:94:d8:a0:cb:16:bb:87:7b:be:5b:c7:d2:51:
80:9f:02:5c:30:38:3c:94:f5:8f:11:c6:c9:30:6a:
49:2b:ef:5e:2a:bf:52:15:b3:ac:df:56:e0:2c:0d:
0b:fa:8e:a9:86:f7:dd:8f:b5:61:50:9d:6c:f0:12:
8f:10:9a:8d:e3:a0:9e:0e:3e:e1:42:d9:e9:d6:60:
ca:39:72:f7:be:05:3a:93:52:17:44:3b:11:4f:2e:
93:06:94:72:24:9d:bd:80:ed:b1:97:0c:4f:72:3e:
0d:f0:d4:80:1a:fe:04:9d:1e:c6:ce:6b:2d:ee:c7:
6e:03:bb:95:e5:d2:43:7d:8a:b1:69:1f:bc:57:4a:
a1:ce:bd:04:d6:05:5b:02:65:b2:6d:09:58:57:63:
1a:b0:c4:24:7c:01:07:19:d2:68:b7:98:d8:35:f0:
57:50:44:86:e3:b0:fb:5c:52:98:af:90:31:fa:5c:
f5:96:e6:2d:aa:e5:87:fe:58:e8:51:5e:72:f4:13:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:61:38:91:E2:43:A5:4A:2D:4D:1B:D0:B8:3D:BF:2D:E4:CF:6A
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:67:8c:ff:1c:1f:db:44:01:bb:7a:05:7a:20:f3:6e:e2:
29:5b:5f:19:b6:1b:02:81:72:ef:6c:36:08:35:c8:d3:9e:31:
bc:f3:df:b3:ce:f8:bf:50:df:6b:38:15:ba:35:52:25:8d:87:
d0:3f:7e:3f:17:46:89:bf:05:63:e7:57:49:81:ff:a4:5c:88:
f7:a4:b9:cc:43:18:c1:34:2d:d0:50:c5:52:0a:89:ce:d0:41:
1e:d3:64:e2:0b:7e:ac:f7:ee:b5:97:26:3e:42:21:07:6b:10:
6b:d7:80:c2:88:bf:c0:33:f1:da:9e:26:f5:21:1a:88:a6:1e:
ee:bd:5f:cf:e9:f0:75:03:f7:6c:74:36:b8:bc:c7:a3:f3:04:
7b:88:58:a4:30:af:b5:95:50:98:3f:de:e7:1f:67:52:0f:ba:
4d:3f:b0:4b:c4:39:c6:4e:6c:1e:52:1b:df:dd:15:f3:fd:ef:
63:90:95:7f:ca:41:09:49:c9:7f:66:79:78:c2:b5:22:74:c6:
65:cb:ef:74:31:92:b8:bf:d8:90:44:05:73:ae:59:60:ad:61:
22:ef:e3:05:1b:de:74:bb:36:0d:91:ac:da:da:3f:0e:7a:78:
9d:74:24:a6:1b:ec:bb:4a:e6:41:c9:17:57:e8:88:83:ca:e9:
ea:d9:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:07 2025 by rpki-client