Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: b1dnnDmOdMVsZDPK8cg/gTvDTLdYdVI/a5GCNE8Eihs=
Subject key identifier: 2E:0F:72:42:CE:0B:82:97:FC:09:A3:DC:47:F8:06:52:11:C5:E6:6D
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 01976A059D4EBB93D03CA40999CE0A3A6D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 08A7
Signing time: Fri 13 Jun 2025 16:00:42 +0000
Manifest this update: Fri 13 Jun 2025 16:00:42 +0000
Manifest next update: Sat 14 Jun 2025 16:00:42 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: Gs7szgP2EwOiyd28CKOjhy/vJ6bJItV7TzIg2UZoDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:9d:4e:bb:93:d0:3c:a4:09:99:ce:0a:3a:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jun 13 16:00:42 2025 GMT
Not After : Jun 14 16:00:42 2025 GMT
Subject: CN=2e0f7242ce0b8297fc09a3dc47f8065211c5e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:43:2a:22:9d:b6:7b:e2:ee:5f:ab:24:3c:
88:00:a3:33:70:e6:1d:0d:4c:94:e5:f2:33:14:9d:
ac:65:54:dc:76:93:09:be:bc:34:f5:dc:c1:a7:2b:
63:a7:9f:ff:51:d6:c4:f8:91:07:06:c3:83:28:79:
fb:82:40:41:15:8a:83:13:55:db:e2:d2:bb:2c:32:
8a:3b:f1:71:d2:04:da:38:9e:4b:4c:2c:fa:36:27:
b1:52:7d:14:e9:7e:6a:de:40:d8:68:31:05:28:4a:
11:d8:23:7d:1f:6f:61:fb:77:0b:10:69:02:f3:d0:
6f:02:92:a4:91:29:f0:c7:fa:39:4a:2a:87:01:39:
12:4f:75:34:32:38:03:d3:f5:c2:de:07:da:b7:07:
a0:5b:49:43:d1:00:42:5f:63:c8:9f:d0:53:d9:d2:
10:8a:d5:dd:0c:f3:6a:d3:c4:2b:cd:51:43:56:cc:
71:b3:1d:50:8a:1c:d1:c0:2f:47:b4:dc:7d:6a:35:
dd:9f:0e:89:87:ef:00:c1:4d:9b:41:ff:07:c0:f5:
d4:34:16:c9:a6:5b:c2:83:12:86:cc:ee:32:b1:9b:
10:2f:5a:9b:f4:f8:15:61:69:60:ae:b9:2d:f4:dd:
21:99:1f:07:e2:80:29:89:f3:1c:57:85:1d:57:32:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:72:42:CE:0B:82:97:FC:09:A3:DC:47:F8:06:52:11:C5:E6:6D
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:34:a2:9f:b1:bf:7a:f4:09:db:41:3e:1a:4c:d7:61:a6:38:
2a:b4:99:28:5e:94:7e:61:6e:a3:0d:b8:91:0d:db:4d:ab:6a:
93:61:0f:c1:8e:80:ee:c9:0f:2d:ba:04:ce:c7:d0:36:00:6a:
66:03:26:35:65:a1:29:5e:90:ff:72:ac:ca:19:86:cf:19:84:
7d:0b:70:28:21:df:cc:9e:dd:42:92:58:e9:79:a6:ce:9c:22:
32:0a:52:c8:29:53:fc:18:06:3d:77:3a:28:73:d3:41:66:8d:
c2:e2:16:9d:7d:a0:a1:2c:03:14:9b:c8:24:4a:6f:68:7b:6c:
80:83:15:64:ca:7c:20:11:06:98:8e:b5:ad:90:89:8c:e3:46:
7a:be:11:59:99:71:d8:ed:3a:5d:dc:b8:3a:86:05:51:10:f7:
29:03:a7:1c:7b:dd:d1:4a:7f:e0:10:3e:ed:12:52:91:ac:9b:
16:62:95:9f:50:33:94:af:4c:f1:63:57:e5:24:ac:26:d7:c4:
0d:12:8d:05:14:f8:f2:4a:dc:c2:c8:4d:a5:b0:f0:ca:4d:e2:
44:b0:47:64:1c:a2:a4:f3:27:71:d5:43:54:5e:d1:df:5b:9c:
49:2b:65:68:6a:19:dc:cc:20:c5:e4:c1:ca:b5:d4:c8:e7:42:
49:b5:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:21 2025 by rpki-client