Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: T3hu5E2Ov/M3d3gInRhj+cp+N5sMIpJ93RLJD0BP4Y4=
Subject key identifier: 65:E7:47:DB:A9:E7:69:FA:BD:0D:F6:BC:A3:90:A6:9B:BD:35:EB:B1
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 019771887B142873D83803C937CED7C15A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0C13
Signing time: Sun 15 Jun 2025 03:00:59 +0000
Manifest this update: Sun 15 Jun 2025 03:00:59 +0000
Manifest next update: Mon 16 Jun 2025 03:00:59 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: seUNSYDDjXAR8+cS0LSGhHOxMCjBazAAE2FkT6m3830=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:7b:14:28:73:d8:38:03:c9:37:ce:d7:c1:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Jun 15 03:00:59 2025 GMT
Not After : Jun 16 03:00:59 2025 GMT
Subject: CN=65e747dba9e769fabd0df6bca390a69bbd35ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:2c:63:66:ae:e5:b6:7a:38:5f:60:ef:66:
ed:c6:2b:1c:54:43:41:a3:0c:f5:93:10:f8:03:bb:
6c:80:ad:cf:20:37:13:30:35:a6:c0:e1:e5:0b:6b:
72:3e:83:2d:6b:a4:6c:e7:ac:b0:72:34:5d:e9:b4:
50:79:bf:7e:10:7c:0e:83:ac:ee:e1:03:1d:9f:44:
9f:79:3b:8a:35:68:7c:1c:98:ac:14:af:b7:18:45:
1e:fd:0b:cc:5b:db:f1:8c:e5:f3:62:57:a7:3b:78:
d1:9c:68:68:01:12:8c:bb:70:ca:41:29:f4:e6:f0:
6d:1c:9f:e6:83:ba:7e:a4:a6:5b:65:3d:ed:fd:3d:
42:da:b2:69:b9:17:b8:86:d0:c1:a3:bb:9b:0f:b1:
0e:38:e2:33:bc:2d:b1:2e:c1:1d:59:8d:34:28:c1:
41:c9:51:ae:e3:1b:f0:b2:22:43:55:92:0c:0f:d1:
52:6d:ac:07:b8:7d:42:cd:70:e1:1c:4d:58:c2:a3:
fe:66:de:d6:7b:7d:bb:e1:3b:93:10:a9:43:24:ce:
f3:9f:c1:f0:8f:4b:ca:86:c4:de:3e:51:7c:d9:4c:
e1:3e:c2:c4:58:4a:62:60:02:8d:ab:ea:ca:5b:7d:
26:59:37:78:9c:2f:64:3f:e8:2a:6e:97:a1:3f:94:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:47:DB:A9:E7:69:FA:BD:0D:F6:BC:A3:90:A6:9B:BD:35:EB:B1
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:9d:d7:25:07:ea:80:2b:a6:f1:ae:e8:3c:da:7b:24:fe:
56:0f:bc:6f:3c:0f:95:2a:37:69:95:2b:b7:3e:5e:ec:3b:81:
ee:fa:f0:12:e7:16:3c:37:b9:34:03:13:0c:1c:4f:a0:90:4c:
cc:af:25:b2:f3:eb:a4:7a:a6:56:81:12:4a:73:a0:d3:38:ef:
4b:1b:b7:d7:4f:91:8a:ca:72:4a:4e:d1:46:29:25:83:9e:85:
55:ae:6f:35:bd:0b:be:99:28:c9:43:c3:e6:63:39:aa:cd:41:
30:3b:50:3a:db:bc:33:3a:76:26:2f:d4:01:80:53:da:51:4e:
3c:f5:41:9c:27:d2:65:1a:91:e3:78:41:da:50:da:97:fa:81:
ab:f1:32:36:5a:11:39:a4:d7:99:0e:d8:a0:18:9d:56:66:4a:
be:ba:15:fa:7d:19:9c:22:93:52:ac:11:c2:38:ab:20:96:8f:
c1:4e:93:8c:4a:02:7f:82:4f:51:f5:29:d0:1b:0e:80:9d:66:
47:08:7a:bd:01:27:f2:bf:e4:f9:50:5a:8b:29:f4:f2:27:df:
3a:d0:3c:0c:cf:1b:c9:48:a9:2b:d8:ba:76:24:9d:0b:ea:54:
2e:9b:f3:0a:11:7f:9a:03:bd:d6:4e:d8:ad:da:dc:af:30:e7:
d4:fc:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:27 2025 by rpki-client