Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: AzV0WJQD1BCTNvl2LVGTc0efanHrFY83280wOoaz5ug=
Subject key identifier: BA:CC:AF:BB:29:80:58:18:FB:F7:D9:FA:1E:A1:6F:CA:8D:3B:E7:80
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0197745240D6FA11387C728C9DBDFAD4CEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 16:00:36 +0000
Manifest this update: Sun 15 Jun 2025 16:00:36 +0000
Manifest next update: Mon 16 Jun 2025 16:00:36 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: cRlSipCe2r/dO9HFnU0ZbNUU6QRJAYyWY6+c66YzV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:40:d6:fa:11:38:7c:72:8c:9d:bd:fa:d4:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jun 15 16:00:36 2025 GMT
Not After : Jun 16 16:00:36 2025 GMT
Subject: CN=baccafbb29805818fbf7d9fa1ea16fca8d3be780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:7d:0e:58:38:2b:ea:44:62:85:d1:22:84:
77:f8:96:02:90:b1:b5:02:fe:59:fa:6b:c2:fb:4d:
68:b5:bd:75:3f:31:87:2e:12:27:f0:2a:78:45:b1:
f8:c6:b1:ba:3a:41:e4:8a:d3:6e:26:48:0b:52:99:
23:4f:58:41:0a:67:00:a8:89:19:8f:c2:8b:7d:2b:
f7:5c:d8:9a:28:54:54:5d:50:a0:6c:81:6e:16:63:
fb:32:61:7c:2b:c4:92:80:a5:94:d9:25:c7:5c:70:
09:de:28:11:21:cc:a8:b2:21:57:71:55:a6:b7:04:
ae:8a:b8:a4:54:f4:57:87:b8:60:81:8b:7d:eb:f0:
2a:63:50:b1:fc:4d:0c:c0:3b:37:ec:52:5b:89:ad:
d3:00:69:9c:06:82:6f:19:b0:54:6d:00:fe:d2:67:
6b:81:42:e7:8a:03:42:28:e2:80:97:9e:75:0d:5c:
52:93:d0:40:bb:e7:ee:8d:ce:c9:5a:99:fb:74:26:
ad:67:97:4d:21:18:0e:5d:37:0c:9b:19:f1:0f:a6:
7b:34:83:50:18:77:26:7f:e4:8c:23:bd:54:ba:33:
a9:c7:d9:ab:6f:cc:a5:c4:31:fd:58:82:61:57:7f:
18:28:3c:33:4e:4a:b9:bf:03:97:2b:d7:5f:fc:fa:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:AF:BB:29:80:58:18:FB:F7:D9:FA:1E:A1:6F:CA:8D:3B:E7:80
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:d4:61:1a:63:d8:7d:9e:4e:5a:36:12:18:11:dd:a9:bb:
bd:75:04:be:6b:05:5a:36:5d:46:c7:81:43:72:a1:b0:b2:10:
52:e2:ff:c8:86:b7:49:3f:ce:28:32:cc:37:d2:02:4b:3d:0c:
ed:13:21:ae:82:ca:f3:f8:19:f3:78:e6:5d:dc:dd:83:cc:a1:
0b:12:74:73:ef:ee:de:9d:cc:29:9d:07:1e:9b:a8:70:49:9a:
b7:aa:f1:16:86:6c:c8:d4:83:2b:29:fa:6a:7c:79:89:0c:c6:
10:4a:a7:17:05:aa:ec:ba:ec:d1:f4:79:35:27:d0:fb:a7:05:
0e:51:c3:72:6b:45:3c:de:9d:f5:fe:db:9b:32:ad:10:8e:67:
f3:f6:a8:97:25:85:6f:f4:75:d9:ca:a9:f5:98:1f:a8:4e:88:
3d:af:39:42:04:37:c5:04:56:62:ef:86:f6:f1:0b:d9:5d:e6:
0d:0d:e3:1e:6b:ae:53:51:71:47:c9:ac:6c:2e:57:3f:e4:cc:
a2:6c:aa:aa:f4:49:c5:bb:9c:cb:8a:64:bc:aa:15:8d:67:64:
a9:24:d0:e6:2f:7b:8c:de:33:17:97:f5:43:bf:1f:69:e3:79:
15:b2:1b:be:0f:22:27:2e:71:da:bb:0d:7a:8a:ad:ac:60:ea:
8f:2a:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:31 2025 by rpki-client