Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: 1JwegH4+JoIHorB3wLIiFxn7ZYJPPPsWbn2giMXGWDE=
Subject key identifier: C3:7C:9C:1F:50:FF:E1:D6:4C:B1:F5:E2:CE:1F:2B:CD:7D:6D:1E:B9
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 01977F7B16602764343CF3A22A96CEBC426C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 0FD6
Signing time: Tue 17 Jun 2025 20:01:02 +0000
Manifest this update: Tue 17 Jun 2025 20:01:02 +0000
Manifest next update: Wed 18 Jun 2025 20:01:02 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: eliP+7HcPUGsh6IGaZlMJpC29edNVrLTzvqo1pSQSBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7b:16:60:27:64:34:3c:f3:a2:2a:96:ce:bc:42:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jun 17 20:01:02 2025 GMT
Not After : Jun 18 20:01:02 2025 GMT
Subject: CN=c37c9c1f50ffe1d64cb1f5e2ce1f2bcd7d6d1eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:12:c8:bf:5f:50:c3:80:cb:db:68:3b:5f:
48:57:95:be:00:8a:97:29:49:2f:2f:ce:a9:9f:03:
2e:35:92:c2:82:43:95:2b:d1:a2:a1:43:ac:c4:41:
de:b8:e8:f1:fa:8d:5d:7f:7e:88:89:d0:47:8f:c0:
1a:fc:65:b3:19:c2:c1:a1:77:10:5c:08:b6:ba:77:
dc:c6:46:85:fa:5d:5b:0a:56:6b:6b:9f:3b:d0:04:
ab:19:6d:ec:fc:9c:99:6d:44:3e:e1:1b:37:f8:68:
a9:0b:62:ac:13:b1:e4:08:10:1b:05:ff:ad:5d:7a:
1c:24:82:24:41:cb:b2:bf:ad:37:c9:50:6c:69:0f:
19:5b:5f:51:24:ab:a8:de:96:19:44:6a:b7:28:13:
a3:c7:be:cb:d6:19:2d:7b:a6:62:cb:13:32:04:80:
40:31:d1:33:db:c1:b4:b2:e0:0e:7c:0a:01:28:f4:
bd:eb:0a:0d:05:69:cb:c2:9f:2a:6c:3d:4d:bd:07:
06:d4:e0:cb:6a:c7:c9:cf:29:f6:0f:ae:88:9d:bb:
5b:f4:8b:b2:9f:c9:97:65:f0:45:e0:c6:ed:0e:e4:
c2:d9:67:cf:9a:59:64:bc:5f:35:28:60:fd:ee:70:
a1:e9:d4:d0:73:60:24:f3:a9:52:5c:a8:1e:3c:af:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:9C:1F:50:FF:E1:D6:4C:B1:F5:E2:CE:1F:2B:CD:7D:6D:1E:B9
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:e9:66:32:cf:e2:dc:03:ca:0a:f7:46:08:2c:d7:54:08:
2d:47:3b:fe:1b:29:83:97:ae:df:8d:f0:31:b2:c7:3e:52:ab:
25:d9:f4:6d:3a:89:39:aa:7a:9e:d2:2d:a7:01:c1:20:a8:ed:
b3:ae:30:18:5e:a6:10:aa:cf:06:70:e2:cc:b4:44:bb:e0:29:
93:4b:1d:43:f4:bd:e6:60:d1:9e:3a:cc:87:2f:f5:72:8b:75:
87:fd:a8:1f:c8:68:ef:e6:62:85:40:2b:ca:17:a1:d3:c9:e6:
e4:1b:04:cf:53:b7:82:00:b2:42:bb:b3:0f:00:6b:3c:6d:94:
fb:a1:92:0a:9f:00:b1:2c:aa:49:67:44:71:f2:b9:10:56:00:
17:ec:73:75:6b:12:87:e1:7b:e5:26:fd:6b:18:12:a0:cb:b4:
2f:d4:84:18:29:57:d3:03:81:d3:99:4c:23:42:d5:bc:b0:e4:
29:56:88:95:53:15:f7:07:de:da:83:62:8f:55:95:3b:41:5b:
0b:a8:55:38:b6:6d:a5:af:39:10:7e:33:39:d3:54:48:48:81:
2a:ad:13:8b:1e:6f:d0:8c:20:e8:b9:18:79:b1:28:df:8b:40:
47:10:1a:a5:04:46:9b:0e:c4:72:43:53:2b:3e:7f:19:0f:57:
d8:c3:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:18:20 2025 by rpki-client