Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File: KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier: QQpDJEmZ6UdSWiVLQr5rg+iPMom/eeEdNOp05EdaDV8=
Subject key identifier: BA:E8:FE:F1:44:55:47:EF:31:2E:8C:51:E0:5C:1C:DB:64:E5:95:29
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 01976F2BD64AC200E768ACB74BC61159B74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number: 0969
Signing time: Sat 14 Jun 2025 16:00:33 +0000
Manifest this update: Sat 14 Jun 2025 16:00:33 +0000
Manifest next update: Sun 15 Jun 2025 16:00:33 +0000
Files and hashes: 1: E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa (hash: QknCCRzW2QumFMETOVNE4NTQsXWLabVtKWWfI6cIov4=)
2: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: whTaAs3y4+ZpjAgA0PVsXhq1PoDyf9+PpwpmCDg4wYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:d6:4a:c2:00:e7:68:ac:b7:4b:c6:11:59:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Jun 14 16:00:33 2025 GMT
Not After : Jun 15 16:00:33 2025 GMT
Subject: CN=bae8fef1445547ef312e8c51e05c1cdb64e59529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c6:ec:65:50:d7:78:d6:34:67:61:b6:0a:d0:
2a:c5:7e:6c:54:37:19:64:6f:a8:8e:66:be:da:37:
0e:2e:e9:32:eb:eb:3a:2c:03:8b:39:a4:1d:d7:b4:
30:f3:aa:99:72:63:dc:14:f0:ee:f2:5f:c7:9b:31:
42:54:90:bf:18:1c:2f:d2:16:de:2b:4b:0e:b4:d2:
5d:6d:5c:c5:68:0c:21:11:cc:5c:7a:45:c3:16:13:
4a:8b:c7:f6:9b:6d:b2:c8:fb:87:b6:88:9a:c9:64:
e5:d6:f0:e0:62:a7:8d:7a:02:e4:9a:41:f7:1e:91:
fd:08:93:a9:62:53:c0:74:52:62:60:ea:5c:83:5d:
77:13:ae:2a:85:8a:f7:71:02:28:c6:eb:76:ea:0e:
d1:13:87:61:dc:ff:7c:3a:58:d7:ea:52:1e:1a:57:
9a:74:b4:f8:36:bc:33:8d:d0:d8:a1:7f:9a:0b:5c:
ea:fa:da:9c:7c:70:6d:2b:0c:f9:43:e5:55:cc:c8:
6c:19:1f:37:fc:27:97:7d:51:90:4a:ee:3b:a2:82:
84:5a:65:1f:67:9a:a5:f0:1a:73:10:41:81:bf:d7:
ed:b1:fb:72:44:6a:bf:c0:3a:dc:70:8c:58:ec:5b:
bb:29:40:da:3c:10:41:8b:fb:74:13:69:79:52:73:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:FE:F1:44:55:47:EF:31:2E:8C:51:E0:5C:1C:DB:64:E5:95:29
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:8f:0d:1d:55:87:9f:16:d2:8a:f3:00:2b:c7:0d:db:cd:
47:70:88:1d:62:5e:78:f2:41:e5:91:d4:10:96:db:04:42:7d:
74:50:a0:a2:8e:b0:dd:72:a6:8d:cb:79:52:68:47:e2:c1:83:
d1:80:4b:0a:7e:32:16:ab:d2:9d:ee:df:d1:47:3e:8f:1a:8f:
ce:7a:0c:09:f3:03:15:34:b4:0c:c4:ea:63:d1:76:b3:c8:9d:
14:b9:64:9f:c0:fa:2d:5c:8c:9a:49:ba:ee:2a:77:7c:92:7c:
9f:0d:4b:71:56:5e:65:45:c6:bf:5f:a9:bb:f4:f5:52:4c:1d:
e9:96:ad:78:ed:8e:50:60:05:d7:c1:13:18:6c:20:3b:99:0a:
86:72:be:47:a9:ab:0a:9d:35:20:15:9e:ec:87:9f:af:6d:ef:
f3:87:22:6d:ed:d0:75:f8:8d:bd:e9:7c:3c:a1:53:75:0f:f9:
e8:5d:05:4d:fb:78:e5:fe:5f:d8:9f:f4:49:52:04:81:5c:56:
e1:62:2e:ba:14:43:3a:84:93:6c:5a:8d:1d:53:a6:81:ca:91:
51:77:3c:fa:8a:69:d5:f8:c6:00:51:cd:7f:4a:fb:33:64:75:
26:4b:99:16:b6:de:3e:db:10:ab:62:9c:72:bf:db:f6:e2:c8:
89:b3:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:29 2025 by rpki-client