Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: ah/c03FTfeDKXWTjncbm7XZaUTWIX3OPgUoLFe1KmL0=
Subject key identifier: 08:5F:D8:46:C0:7D:92:F1:FD:A3:CC:7D:A5:21:37:7E:D8:61:C9:C0
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 01976F9989A7CF3C3AF22ED20AB9BCC3ED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 129E
Signing time: Sat 14 Jun 2025 18:00:22 +0000
Manifest this update: Sat 14 Jun 2025 18:00:22 +0000
Manifest next update: Sun 15 Jun 2025 18:00:22 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: 5wIIi3uNM0F7bjuRnb+hr0xrIv1D1L0qGSmWGKYY7e0=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:89:a7:cf:3c:3a:f2:2e:d2:0a:b9:bc:c3:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jun 14 18:00:22 2025 GMT
Not After : Jun 15 18:00:22 2025 GMT
Subject: CN=085fd846c07d92f1fda3cc7da521377ed861c9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c7:3b:7c:93:e1:5d:45:e5:a0:9f:47:61:d8:
da:93:25:23:47:4f:64:86:e4:85:bf:23:ae:25:cf:
66:bb:32:0e:24:73:45:9a:9c:49:95:8d:f7:23:73:
4c:d9:35:d1:c0:d0:e2:fd:90:e7:a8:21:f4:e6:36:
f5:33:64:10:04:d0:17:0f:b0:f8:77:12:9b:aa:ba:
5e:4e:2f:76:53:61:91:bb:55:2f:f2:76:8f:70:c1:
0c:3b:10:6a:72:5d:bd:a4:84:8e:d8:8c:c6:d7:b0:
98:87:33:34:50:31:11:03:47:88:21:7b:93:fc:fb:
05:91:20:e7:dd:db:a0:26:d5:c9:59:f3:ed:df:e3:
fc:a8:9b:63:21:f3:30:8d:f5:86:ad:f3:42:b6:3a:
91:34:a7:27:9b:c4:52:57:2c:cb:28:43:c3:c0:44:
c9:a4:c5:70:76:d0:62:ac:91:b2:1f:1a:43:28:95:
04:1e:47:1d:3d:89:36:c6:16:c8:03:c1:1f:bb:d5:
14:7b:d9:39:93:fb:21:b1:b9:c4:e3:41:16:3a:81:
e6:b3:56:7b:8d:71:39:ca:bb:5f:1f:ab:7d:25:1a:
f7:60:c2:1c:5d:2c:79:6d:9a:a1:9c:e9:4d:ca:32:
3d:15:08:ef:f4:86:a2:f6:35:c7:4a:f3:ab:e9:99:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:D8:46:C0:7D:92:F1:FD:A3:CC:7D:A5:21:37:7E:D8:61:C9:C0
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:cd:72:d4:cf:33:9c:69:32:7e:df:15:3f:cb:ea:86:ee:
e6:20:2e:63:a7:05:ce:bf:c8:4d:6d:55:f5:96:83:5c:04:d3:
41:27:d6:88:27:fc:e0:60:30:fb:79:5e:57:37:8c:a4:fc:08:
fc:87:f7:7b:82:4a:ab:58:7e:08:0e:3c:74:60:9c:ca:7d:a6:
60:0d:fa:27:89:54:05:09:b1:5a:c4:a4:d1:74:63:e1:de:d9:
27:e8:9e:9a:09:36:ea:84:c4:a6:3f:12:1d:3e:d0:9a:24:e2:
df:a6:98:71:d5:d6:d3:93:f4:35:09:81:52:8b:07:9f:6c:6b:
b9:9b:ba:94:05:fc:bf:13:64:10:ee:5f:88:9f:b3:e0:cf:c9:
1f:14:3b:aa:5c:0c:1d:46:bd:ca:47:d3:78:01:52:80:72:5e:
3a:8e:e2:17:fd:bd:fe:e0:f5:ed:bb:2b:14:1d:07:b9:6b:34:
f0:43:12:6c:af:ed:44:03:0b:e8:87:8b:2f:46:7f:4f:96:b0:
05:93:39:be:a4:3a:2e:25:ba:fd:14:2f:ee:d6:04:f9:f6:b0:
e5:20:b5:67:33:71:86:d7:04:54:44:ac:bb:b2:a7:f2:27:f7:
34:08:57:cb:43:e7:b3:35:bb:42:8f:78:af:31:cb:89:f1:9a:
10:7d:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:27:57 2025 by rpki-client