Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: T/qLgIJ+pqyYA6aS95jmRdWXh3RuGm3zmngQtTJaIUI=
Subject key identifier: D6:83:82:23:97:95:69:EF:99:84:04:A9:0F:C3:A1:79:66:D8:77:81
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0197684E3D58878F953B0C89396BC9AA363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 019A
Signing time: Fri 13 Jun 2025 08:00:47 +0000
Manifest this update: Fri 13 Jun 2025 08:00:47 +0000
Manifest next update: Sat 14 Jun 2025 08:00:47 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: ySlaHFnM/zdLfqdcCQu/1SDDJ1OLg3Z7kDp4+EIcBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3d:58:87:8f:95:3b:0c:89:39:6b:c9:aa:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Jun 13 08:00:47 2025 GMT
Not After : Jun 14 08:00:47 2025 GMT
Subject: CN=d6838223979569ef998404a90fc3a17966d87781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:0f:30:d8:88:61:da:37:e6:12:f2:ad:25:
7e:3c:0d:54:f1:ad:39:d5:3c:20:e8:75:70:f9:94:
5c:f1:78:23:10:ca:5a:77:a1:eb:c3:d5:a9:47:c7:
7e:88:89:97:f9:8d:44:8a:89:cd:12:db:d5:34:d3:
51:a5:cb:1e:d1:55:64:bb:b3:e0:99:ee:7a:11:5d:
cd:c4:d7:5c:3b:98:51:a1:78:be:ca:f3:8c:97:1b:
b2:8b:41:f6:82:90:bd:9c:b9:0d:3c:1b:a8:22:6c:
2f:60:fe:bc:76:3d:64:58:f2:1b:0c:d3:9e:4a:f8:
ce:05:5a:a3:39:e2:e1:d7:03:1f:fb:e8:7b:db:8e:
56:7d:e9:a3:20:da:f5:e1:2b:c9:d7:16:1a:be:14:
7a:3a:80:98:27:f3:9d:2b:96:eb:66:b5:d4:70:fa:
bb:13:65:49:3e:09:ac:a9:64:08:bf:c9:f6:5b:36:
54:c9:34:9d:00:f2:88:50:2e:d5:70:6b:6f:47:b7:
4a:ed:a1:31:f3:81:e5:a5:a2:97:fa:9d:41:47:e8:
4b:fd:6c:10:98:a4:1c:4a:60:22:1a:3b:5c:3d:08:
32:38:f8:e3:e3:3e:01:fd:20:83:6a:af:cd:a6:eb:
45:27:31:6f:e0:d5:3b:34:4d:ce:2e:0f:ef:2f:af:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:82:23:97:95:69:EF:99:84:04:A9:0F:C3:A1:79:66:D8:77:81
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:d1:1f:ae:19:1b:b1:68:76:cf:8e:0a:ed:45:96:93:56:
20:73:a1:50:18:0c:85:0f:91:41:6f:f6:8e:7e:5f:56:b4:14:
bd:79:f4:ca:43:f5:df:2c:22:df:73:d2:bd:31:5b:27:d5:27:
dc:10:27:96:c2:73:ef:17:9f:c0:f0:f8:9d:ad:8a:40:f5:66:
e5:ad:5c:4d:ee:c0:c3:16:ba:d1:45:78:8f:ef:7c:57:cb:06:
ea:95:d6:2a:cf:e1:bd:ee:be:b9:f6:b3:33:47:e7:13:6a:2e:
f7:2e:2a:92:e6:c8:c3:e8:22:a9:42:e1:00:68:16:c1:31:12:
7b:f7:58:b0:41:18:cd:92:00:a9:99:cc:51:88:ce:c9:5b:03:
08:40:13:76:62:2d:58:cf:a3:b5:7e:73:57:e3:f9:4d:bd:f8:
34:32:d9:92:25:c2:28:53:96:15:a7:fb:f1:20:98:a2:23:58:
45:82:5c:42:f3:d8:1a:3f:4e:9a:22:4b:d3:3c:3b:fa:db:38:
89:18:be:26:7d:ac:d8:19:02:a0:6c:20:42:ff:52:72:cf:22:
fc:b4:39:77:a1:4f:23:8f:d6:a7:7b:83:ca:70:3e:7d:19:b0:
56:ed:30:2c:7e:ed:6f:ab:ba:d5:82:ff:91:03:4f:7d:72:05:
22:15:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:00 2025 by rpki-client