Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: eSdu9Qxn31G3cGW7FePq9pZBZXSelfvvoFtIMIElQ5Y=
Subject key identifier: 94:51:F5:8A:B7:D2:D2:01:58:F6:ED:60:66:4C:F2:39:0D:F2:03:9A
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 01977376C0D5599563C73D771D1A26D47EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 0B2D
Signing time: Sun 15 Jun 2025 12:00:51 +0000
Manifest this update: Sun 15 Jun 2025 12:00:51 +0000
Manifest next update: Mon 16 Jun 2025 12:00:51 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: I/WMafas3mCydlm8YsvAJup7LSUXMq5NP67WSaK1SSA=)
2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:c0:d5:59:95:63:c7:3d:77:1d:1a:26:d4:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Jun 15 12:00:51 2025 GMT
Not After : Jun 16 12:00:51 2025 GMT
Subject: CN=9451f58ab7d2d20158f6ed60664cf2390df2039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:ff:0d:cd:8d:67:b3:72:11:9b:d8:b5:e6:
eb:dc:eb:1e:4f:f1:e6:3e:b3:aa:67:1d:0f:77:0f:
d9:c6:ff:02:f3:b2:81:48:c2:e1:96:d7:26:dc:ae:
c2:1b:78:7c:1b:17:f7:ca:7a:d9:85:ef:57:53:a3:
bd:cf:0d:22:b0:08:ff:80:07:82:a8:45:c1:a8:1a:
b0:68:a0:1e:39:7c:8e:62:1f:81:f0:f0:cc:d2:3a:
1a:36:30:74:25:39:67:60:db:66:05:ba:a3:07:a3:
2a:0a:78:da:cf:38:8e:2f:39:79:3a:4e:e8:86:52:
82:6d:ab:90:ba:97:a7:25:cd:df:a2:02:a7:e4:34:
20:b8:ca:c9:bf:d2:20:c6:3c:9f:4f:d3:5a:ca:26:
9f:ac:21:34:87:b9:6a:f7:ef:e0:4f:b2:4f:de:24:
a8:13:a4:c0:4d:0e:90:28:3b:fc:72:f2:8f:d2:f7:
10:a7:fb:bb:60:ff:a5:60:93:22:44:40:ee:96:22:
1e:9f:be:6f:79:04:6b:28:2e:56:45:4f:5d:98:df:
1d:a8:46:b4:83:21:55:d0:49:bf:9d:54:0c:e4:b4:
36:25:d1:ee:c4:91:d0:d6:b7:b5:66:91:b2:1f:41:
0a:50:68:ef:f5:bb:3d:de:b4:68:7b:e8:09:44:5f:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:F5:8A:B7:D2:D2:01:58:F6:ED:60:66:4C:F2:39:0D:F2:03:9A
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:90:81:61:83:3c:28:35:79:66:18:7e:57:5b:9a:1e:1d:
e7:b3:f4:14:93:c6:d7:63:4a:b5:95:83:ec:3a:b0:87:09:ac:
00:d8:d4:27:20:92:88:5f:ac:dd:c2:d7:7c:20:eb:48:c8:d0:
c6:be:fc:be:f3:e6:1b:8f:34:85:91:83:ec:09:dd:0b:aa:20:
11:4d:10:fc:55:e4:3b:ce:84:f9:26:ea:c9:a3:2c:75:4a:fa:
9f:fc:aa:6e:ab:2b:31:30:c1:ed:36:dc:43:0e:0e:db:09:e2:
92:f7:be:6f:57:77:4f:a8:bd:63:04:08:64:88:af:77:07:59:
01:4a:c0:9e:c8:d3:c5:b9:63:13:85:71:f0:9b:85:8b:ab:67:
48:c1:c9:29:ac:31:fd:6d:83:0f:7f:4c:37:38:39:08:71:b1:
0f:5a:07:af:f0:1e:50:ee:c0:e2:6d:27:fb:69:93:aa:6a:28:
76:c5:17:2f:ec:d1:17:69:50:0b:83:fc:da:dd:99:fa:b5:73:
1a:e3:ef:9b:9c:77:72:c5:f8:6a:5b:86:ff:89:5e:d4:0a:a5:
67:dc:1a:07:ae:60:a4:8c:3b:de:4b:19:65:fb:d5:28:db:41:
4b:a5:0f:6a:ae:bc:4f:57:b7:02:ab:31:94:8d:be:32:e4:3e:
36:82:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:55:31 2025 by rpki-client