Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: nSn4lArXWT8HlPoSlPy3adGbLNmVxdlX1Gd1DUR+Bak=
Subject key identifier: 0F:AE:3B:C5:18:F6:2A:3C:48:E7:95:08:11:39:70:03:F6:02:D6:74
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01976F99DC09B0D46ECBC669467BB7037575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:00:43 +0000
Manifest this update: Sat 14 Jun 2025 18:00:43 +0000
Manifest next update: Sun 15 Jun 2025 18:00:43 +0000
Files and hashes: 1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: zPjhOxrQPJE6pv1bc45xeAhLzdCjglQ1vG4X1Y8S+7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:dc:09:b0:d4:6e:cb:c6:69:46:7b:b7:03:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jun 14 18:00:43 2025 GMT
Not After : Jun 15 18:00:43 2025 GMT
Subject: CN=0fae3bc518f62a3c48e7950811397003f602d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:cd:f1:9a:6a:3f:4c:fc:6b:4b:2b:77:e6:
7d:ca:fe:34:76:bd:2e:05:d6:b5:e9:06:dd:25:91:
00:1c:6d:b6:78:56:31:97:5c:2d:f6:58:ab:7f:45:
a9:25:a6:ef:03:bf:38:b1:ad:f4:63:73:4b:0c:8f:
14:9a:13:40:f0:6b:1b:2c:6d:08:d0:7a:97:d1:bd:
78:48:29:6b:d5:e4:6a:04:8d:7c:af:46:5e:ec:e4:
82:42:a6:46:28:50:f5:70:28:03:30:e9:63:d6:41:
76:1b:b2:28:bc:f2:d0:06:d6:37:20:89:59:76:93:
af:40:6f:61:7e:c5:21:9a:83:97:6c:5d:9f:e3:0d:
ea:af:ef:3e:42:71:5d:1e:e6:f4:e0:27:7d:7e:f3:
d1:01:08:ce:81:dd:75:ef:63:97:cb:c1:9f:35:ff:
4e:58:a9:a2:11:fd:a8:c9:1a:cc:e4:10:f0:13:94:
bd:eb:e7:45:e9:00:5c:93:fd:5e:79:19:61:fd:38:
e2:6c:a1:19:88:9a:fa:16:9e:76:8f:3e:89:e6:e4:
ad:2b:24:9c:a5:fa:a3:80:17:50:9b:f3:3d:b7:cd:
18:7d:f8:13:d4:eb:e8:93:b1:69:5b:96:f1:1a:d7:
d2:43:eb:44:9f:45:e4:87:86:bc:36:8a:bc:f9:b0:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:3B:C5:18:F6:2A:3C:48:E7:95:08:11:39:70:03:F6:02:D6:74
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:24:24:96:7f:24:e7:d6:14:1c:d6:24:f5:cf:ec:59:3f:7a:
1d:19:10:91:58:a4:08:83:bb:ca:90:9b:9d:3c:5f:cb:b7:ea:
99:16:a7:cf:4f:a1:6a:02:1e:6a:6e:58:6c:49:11:11:d3:e2:
83:e5:dd:3f:77:07:a8:99:d9:0c:04:3b:1b:b9:4e:2e:54:18:
db:3b:16:78:70:87:7c:22:27:65:19:06:2b:1f:3b:99:58:84:
0b:39:09:db:94:50:59:cd:ce:26:bc:77:61:19:48:b5:73:c0:
37:0e:30:03:2f:83:f5:1f:db:01:e3:a2:6e:47:29:1a:91:58:
4d:64:67:1e:b5:b6:04:35:92:46:cc:5d:24:21:ff:02:35:bb:
bb:93:20:c9:13:9c:dd:16:90:30:df:bb:59:3c:3b:da:21:12:
76:38:dc:87:1b:f5:ca:f9:eb:3e:30:ab:70:bf:7f:58:58:20:
7d:ff:2f:7d:8e:7c:15:e7:75:48:f9:41:5b:7b:85:30:ee:25:
f1:1f:bb:62:90:b6:be:ee:9e:06:6e:03:9c:c6:2c:0b:d6:b4:
f7:8e:13:2f:9f:df:e5:b2:4b:e3:57:fb:b8:58:d7:0c:9e:a0:
3e:53:56:e6:94:0f:8e:19:89:34:fe:dd:1a:be:c6:f7:d2:0a:
ff:a5:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:21 2025 by rpki-client