Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: 4y8W4uynFs9PxqErXpLlQCCH7E68mDANlBMjv4AwTEw=
Subject key identifier: 0E:2B:14:D6:49:AA:56:71:78:15:AE:54:68:DB:25:D6:21:79:67:F4
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0197752E15804AEFAAB078A79DAD18FAE4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 20:00:43 +0000
Manifest this update: Sun 15 Jun 2025 20:00:43 +0000
Manifest next update: Mon 16 Jun 2025 20:00:43 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 7tZAhqzVlqpn+F0YCb+Rxn6cBFnzqPcERKPy/o+O60A=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:15:80:4a:ef:aa:b0:78:a7:9d:ad:18:fa:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jun 15 20:00:43 2025 GMT
Not After : Jun 16 20:00:43 2025 GMT
Subject: CN=0e2b14d649aa56717815ae5468db25d6217967f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:a5:2f:61:c3:da:62:af:a9:28:52:75:9b:
c5:52:f3:74:a5:52:e7:ab:18:2a:95:5c:f7:b5:d8:
0c:2d:c1:00:b6:03:7b:26:37:5c:e4:d6:d6:c0:5e:
cb:f0:56:5c:68:51:ec:b1:a9:f0:0d:a6:d1:69:95:
12:33:e8:91:5f:87:f8:a0:71:27:aa:a3:6e:b9:b3:
bf:56:af:4d:12:b1:8a:6e:98:8b:fc:d7:3d:d5:2f:
90:dc:20:3c:b6:dd:0d:43:3c:70:0f:ec:f2:09:89:
24:a8:8a:bf:52:cd:c0:24:f7:6c:03:94:79:3b:c9:
30:11:d0:91:b4:64:ab:a4:a6:58:0b:3a:23:5c:47:
11:c0:51:6d:c8:60:55:71:b5:98:88:b5:17:f0:b5:
f1:82:84:d9:1b:da:e7:d0:41:c0:ff:cb:89:ff:c4:
3d:f7:39:2f:a7:fc:1c:fb:51:21:62:29:16:4d:4a:
e6:03:b0:fc:86:c1:d7:ce:ec:f9:a1:d0:ef:1e:b4:
2e:dc:c9:69:ef:60:90:b8:a6:7d:55:7c:00:70:21:
69:59:71:34:2f:63:cc:34:89:d3:ef:a0:fd:48:ed:
de:50:6a:ba:df:dc:8a:46:41:dd:b0:e2:3a:bc:84:
44:74:df:37:82:e2:c0:60:ae:24:a1:ab:c4:53:4b:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:14:D6:49:AA:56:71:78:15:AE:54:68:DB:25:D6:21:79:67:F4
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7e:16:b3:eb:92:11:8f:db:a4:a3:45:73:3d:e1:fb:bc:18:
b2:75:b0:87:f7:87:42:ee:71:a9:1c:23:5a:d3:d1:b0:83:dc:
f4:ee:12:59:a6:dd:cb:e5:cc:3c:df:26:a8:70:fe:13:9c:1e:
2b:a0:80:ff:a5:2b:51:5b:e0:4b:16:e0:79:eb:bc:93:71:ec:
23:6d:d0:7a:8b:ac:08:9a:ba:d1:9b:ff:ac:25:cf:98:80:25:
16:a8:99:c9:4e:95:23:8d:3c:73:5a:6f:c7:ae:d7:ae:82:07:
ef:4f:b7:b9:33:24:a5:01:b8:25:e1:ed:fc:8f:4b:ab:77:2d:
39:9e:77:43:a5:40:e2:b1:ac:f7:8a:f7:77:54:78:a0:74:17:
0d:6d:77:76:d2:99:33:39:97:cc:26:a2:65:18:12:39:22:bf:
30:0a:d4:11:65:17:e4:43:0d:85:58:c2:d7:52:7e:0b:bd:3a:
e8:9d:5f:e2:21:23:d9:7d:83:4f:15:03:6b:12:0c:63:d1:ff:
ec:ea:41:35:6f:94:32:8d:55:f5:c2:39:99:69:f3:e1:97:2e:
c1:c5:63:5b:92:1e:53:d1:7a:6c:66:d9:19:16:2a:ca:10:d4:
d6:5e:b2:a5:4e:62:e5:b6:b6:a4:5c:b4:10:cb:bb:0b:dd:4e:
e2:35:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:34 2025 by rpki-client