Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: x1pbm9mRu324O+NgcSS1pncZPFIb1zxEv/j+63NnCzU=
Subject key identifier: CF:D6:C3:DC:64:27:DA:4E:61:54:42:5C:4D:97:BB:59:67:FD:0B:87
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01976D746A5CE32E55258508B4E39B5438C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1152
Signing time: Sat 14 Jun 2025 08:00:35 +0000
Manifest this update: Sat 14 Jun 2025 08:00:35 +0000
Manifest next update: Sun 15 Jun 2025 08:00:35 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: MmsMdwMiujrStOH2ox0k3WqgiWdHxDLHtEYNn9LPvGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:6a:5c:e3:2e:55:25:85:08:b4:e3:9b:54:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jun 14 08:00:35 2025 GMT
Not After : Jun 15 08:00:35 2025 GMT
Subject: CN=cfd6c3dc6427da4e6154425c4d97bb5967fd0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:d8:34:4f:d3:ef:db:49:07:1f:bf:55:91:
5a:4f:20:43:c4:ed:05:29:1d:8b:80:a4:c9:a6:f7:
00:d8:03:3e:93:89:d3:1d:6c:fb:39:7c:bd:a9:b5:
dc:52:ca:f3:61:57:46:85:fe:ca:33:c0:26:ae:5b:
71:f0:d2:53:17:27:93:66:ca:bc:a9:bc:bd:93:39:
bc:ae:e1:41:d7:be:ea:3f:d8:ff:c8:8c:b2:79:ec:
42:d5:ef:bd:ec:51:b6:f8:cf:71:dc:c2:1b:f3:a2:
50:0e:ff:c3:65:7f:a8:32:58:de:33:21:62:e2:8f:
7d:31:8d:8a:ac:35:50:af:f6:97:55:04:3e:23:80:
37:76:e6:00:22:10:2f:6f:4a:43:70:e7:4a:6f:8b:
83:9c:b1:80:c7:3f:68:d9:3f:dc:65:87:d4:62:b1:
88:94:2a:da:bd:47:b6:36:09:23:07:99:55:50:fd:
3d:0c:64:7d:1f:24:9c:da:b6:36:d2:3e:bd:46:ff:
a0:0b:51:b1:dd:59:e4:89:53:d9:67:59:d1:be:11:
3a:9c:d4:8e:95:b8:d4:1c:5e:9a:4a:3e:a1:3f:42:
8c:77:7b:28:55:30:8f:79:c2:ad:d6:fc:0b:dd:e8:
0d:fd:fc:ef:8d:6f:9a:ca:67:93:67:f7:bd:8c:08:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:C3:DC:64:27:DA:4E:61:54:42:5C:4D:97:BB:59:67:FD:0B:87
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:0e:7d:23:a1:64:d2:8a:a5:99:f0:6b:0c:8b:b7:80:8d:64:
1c:c6:16:4b:b2:e0:c5:58:7d:7e:96:6a:4b:04:48:e1:df:4b:
18:3e:06:b7:6b:2c:4b:a6:f5:e7:4c:5b:1b:b6:57:af:15:26:
81:99:a7:29:d9:31:c3:24:96:82:99:15:b0:07:42:57:5c:ce:
45:65:85:18:f6:0c:e7:37:5c:f3:24:f1:90:82:6a:34:51:b1:
5a:5b:8d:0a:13:7a:f7:97:4b:d0:e5:2b:43:83:d5:16:b2:71:
f3:d4:3c:f7:f0:2e:e6:87:c2:98:37:a0:4d:82:02:f6:d7:e0:
4f:be:78:b5:c7:79:a6:80:91:66:f8:3f:fc:a8:25:16:f6:91:
66:e9:1b:b6:2a:25:4b:f0:fd:d6:70:37:d1:6a:5f:89:f7:7d:
e0:ac:4d:81:10:f5:ca:cc:bd:0c:24:e7:ef:2d:81:a5:df:42:
c3:3e:8b:6e:44:56:c4:8d:9a:b5:cf:e6:1a:da:59:5b:33:1f:
02:fc:43:f8:9f:32:64:43:8e:49:d7:1f:36:2a:23:b3:19:fd:
56:47:3f:ec:25:53:87:9a:fb:4e:8b:21:c2:e9:70:3f:47:ac:
ba:1b:ac:44:b1:90:87:94:32:ab:2a:06:01:f0:5f:49:f1:08:
aa:0d:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:47 2025 by rpki-client