Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: KHlmHUUrq9xWAtzaSKwGf37VlHlsinoWb0iJ0OmZrQk=
Subject key identifier: D0:AD:CA:A0:15:97:9A:70:45:4B:A8:53:B9:0E:CC:E1:9D:79:02:7F
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 01976DABC3E974818FFF273ACD1803CC8178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0C29
Signing time: Sat 14 Jun 2025 09:01:02 +0000
Manifest this update: Sat 14 Jun 2025 09:01:02 +0000
Manifest next update: Sun 15 Jun 2025 09:01:02 +0000
Files and hashes: 1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: Bc6b0AZTIlR5Qil0iozM0kEmz5fMf39oTTWbr5o5or8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:c3:e9:74:81:8f:ff:27:3a:cd:18:03:cc:81:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jun 14 09:01:02 2025 GMT
Not After : Jun 15 09:01:02 2025 GMT
Subject: CN=d0adcaa015979a70454ba853b90ecce19d79027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:42:4c:81:b2:07:0d:a4:a6:ea:0b:ec:b5:
0c:1f:52:bc:64:0b:a8:88:cf:b8:68:62:cf:1c:85:
9b:59:91:e2:6d:b0:1b:1a:f2:4b:bc:67:12:6e:2d:
52:00:b5:69:85:1d:ae:51:30:88:e6:51:ba:a7:26:
aa:11:79:d3:47:6d:c0:d1:4c:c7:90:cc:91:42:71:
96:51:2d:6b:1a:8d:0c:49:20:c8:6a:db:2a:3b:42:
f8:60:4b:92:97:bc:f5:a3:c8:a3:9d:9f:ef:77:36:
fa:fb:5a:57:03:23:c4:6a:7e:36:fe:ba:2f:35:89:
db:21:47:da:aa:20:b0:74:23:da:b4:fb:69:6e:f2:
66:04:ce:69:0a:68:75:39:32:bb:c6:aa:aa:0c:76:
c7:f2:8c:c6:c6:7a:e4:41:a5:27:e7:30:7e:f3:c7:
c7:bf:d5:d5:e5:9f:ff:9f:77:a4:1d:5d:42:28:4e:
b7:62:20:b2:02:2b:f8:dd:53:19:ef:96:d9:27:90:
1d:e0:49:da:89:84:1b:ee:b1:41:8f:e7:8d:8b:bd:
34:93:8a:1b:ad:16:23:79:88:9f:de:5a:17:a0:b6:
2e:f8:85:e8:9c:10:63:4a:62:74:ec:3e:7d:7e:a1:
b7:32:09:42:7f:2d:81:f4:9c:e2:03:e7:45:1a:b5:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:CA:A0:15:97:9A:70:45:4B:A8:53:B9:0E:CC:E1:9D:79:02:7F
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a1:79:69:3d:13:ab:69:27:fa:6a:26:07:5d:cd:09:75:f0:
f5:a4:11:96:73:a2:24:af:6f:1b:11:e3:f1:b8:dd:f0:61:14:
9f:ab:32:a1:6e:37:17:d7:f0:18:72:74:0b:9c:35:19:28:60:
83:40:5c:a1:54:ab:3f:cb:c1:62:8e:bd:ce:6c:db:69:80:77:
65:43:2c:a9:1e:f1:cd:21:3b:65:b9:73:32:74:74:fb:28:e9:
e4:d9:7d:a2:9c:33:56:f6:b4:d8:b0:1b:6b:b6:08:5d:62:19:
ea:ca:18:a3:38:f3:dd:e6:46:a2:e9:59:dc:30:09:bb:31:67:
ae:6c:18:3d:90:45:a7:1f:f8:f7:47:94:23:ba:c2:99:13:54:
2a:16:9e:57:31:cf:93:ac:8f:1f:37:45:c4:e7:b4:21:f0:40:
14:e2:7f:46:fa:1c:af:71:a6:22:a0:a6:a9:38:66:26:75:62:
a4:a4:2a:04:97:66:6d:9d:35:51:64:2b:df:a5:ea:b0:81:d9:
86:d1:9e:86:55:56:3a:82:3c:cd:09:b5:82:e9:30:8f:f9:c2:
74:f0:62:e4:15:a5:0a:f4:b9:a2:48:59:98:21:ce:f3:ba:7c:
ee:7e:e1:10:4c:d4:98:6e:b5:2c:c4:94:45:d1:14:d1:2b:c5:
3f:10:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:31:04 2025 by rpki-client