Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: 4+ygb0wGEbsLxb/AIh5q0IYzEgwylRWgTz7cQO/Ok88=
Subject key identifier: 02:A8:0A:8B:79:09:3D:13:81:FA:06:58:8B:9C:FF:32:F3:D0:02:0A
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 01977640A8001E852A30C57CDDA55C118617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0E8F
Signing time: Mon 16 Jun 2025 01:00:38 +0000
Manifest this update: Mon 16 Jun 2025 01:00:38 +0000
Manifest next update: Tue 17 Jun 2025 01:00:38 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: wgVWUH5VbVATkSzpraj7T0iWhkd8riDd/iIdrEMNmC4=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:a8:00:1e:85:2a:30:c5:7c:dd:a5:5c:11:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jun 16 01:00:38 2025 GMT
Not After : Jun 17 01:00:38 2025 GMT
Subject: CN=02a80a8b79093d1381fa06588b9cff32f3d0020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:55:e6:d8:7c:e6:6b:62:60:4c:2c:62:7c:
01:bd:19:79:ed:c3:10:f0:c6:2d:d9:6a:8a:1f:6d:
9e:80:10:49:7c:49:97:ae:6e:97:50:7b:88:89:f7:
ad:e8:9a:e9:09:01:ee:30:a6:39:2a:32:22:df:c0:
2a:3e:d9:e0:8b:16:7f:66:65:1d:be:80:5d:be:a4:
2a:af:50:b8:44:8f:58:78:e0:2f:57:09:83:85:48:
30:1d:b1:97:ae:65:4f:c2:39:ea:ec:cf:65:32:2e:
51:10:b6:56:88:82:ca:c2:80:5d:2e:11:65:d6:42:
31:49:bb:8a:50:9d:5c:63:93:f7:e0:a7:66:7b:0e:
56:2f:a0:0f:fe:f2:05:42:c2:0d:1c:e8:60:a8:30:
20:64:a3:58:5a:1f:ee:fc:3e:6f:5b:0c:b4:08:58:
6e:d7:6b:c0:fb:83:9d:11:65:36:dd:82:92:e5:7e:
98:e3:51:01:73:e4:3f:4f:0e:1f:b1:0a:02:98:b3:
d3:6f:e1:09:5f:95:db:24:96:70:03:25:42:53:23:
ff:34:e2:78:e5:bd:15:e2:53:34:ff:3d:d6:51:f1:
f5:86:c0:18:d2:bf:dc:4e:d7:b2:eb:bc:50:0e:51:
ba:a4:3e:48:e0:50:11:1e:73:e7:b6:d5:84:40:63:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:0A:8B:79:09:3D:13:81:FA:06:58:8B:9C:FF:32:F3:D0:02:0A
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:63:c0:e2:21:1a:a6:9a:50:fd:f5:38:2a:d5:83:7e:92:27:
d7:cb:ef:76:95:df:48:66:cb:b5:e9:1d:48:b5:ad:6d:8a:ea:
af:4d:1d:0f:65:33:c0:2a:a9:49:2d:42:da:dc:38:c6:b9:1f:
4a:f0:e0:fb:5e:b5:84:00:42:82:5e:09:2a:89:6d:0b:75:cc:
f8:57:a9:f7:fb:84:32:7a:9f:50:2e:c3:6a:23:5e:dc:51:af:
29:fc:bf:1d:a7:c0:f5:52:f8:ae:b1:da:5e:5f:82:0e:7d:fa:
5a:67:1c:51:2f:e9:73:0b:f6:c4:b8:9e:3d:74:9a:bc:5f:22:
df:e6:aa:a0:7e:c2:5b:f0:cb:ab:c4:30:be:63:03:19:f0:3c:
0b:0f:aa:51:be:14:c8:00:10:d8:d0:8b:d0:54:ef:f1:2e:05:
be:f6:68:5c:bb:3c:3a:43:fc:b3:6f:bf:ea:7f:e7:71:44:9b:
5e:6a:87:f1:16:9e:1e:43:b5:35:bf:67:2b:37:85:3a:b6:4e:
7a:10:1a:d6:9c:c7:48:97:94:a1:fc:87:fa:ff:06:a1:33:4f:
d3:b7:aa:63:51:74:32:a1:5a:4a:09:38:83:c5:8a:81:68:22:
83:e2:61:08:0a:5a:e5:74:a8:1e:b9:4a:b1:93:45:46:e6:48:
51:28:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:40:51 2025 by rpki-client