Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: 2thidmKRiAV2Rj0hh5EyHetV3KVFoTVFUNm6Tyh79dU=
Subject key identifier: 45:3F:2B:55:E5:4C:75:2F:95:D5:16:57:BC:03:C6:F0:9D:C5:D5:55
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 01976D06B7B2648D15958AC33C9C8357EFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 0395
Signing time: Sat 14 Jun 2025 06:00:46 +0000
Manifest this update: Sat 14 Jun 2025 06:00:46 +0000
Manifest next update: Sun 15 Jun 2025 06:00:46 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: cEeAmAZwzUUPfMks/a1vftRnuXxRLwSUSN/ky5gl/v8=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b7:b2:64:8d:15:95:8a:c3:3c:9c:83:57:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Jun 14 06:00:46 2025 GMT
Not After : Jun 15 06:00:46 2025 GMT
Subject: CN=453f2b55e54c752f95d51657bc03c6f09dc5d555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:4e:88:c1:b6:60:ce:ad:6b:c5:26:04:17:
3d:9a:43:f2:6f:97:45:58:4b:68:26:e9:60:14:ee:
0e:9d:e6:0e:32:5e:57:70:2e:39:a5:20:ce:59:bb:
8f:c7:61:f1:0e:3d:e7:20:0b:af:8c:62:9b:8b:4e:
fe:96:d1:6b:f6:9d:f1:b3:8b:bf:4c:97:e3:8b:7d:
b4:b1:35:ea:52:18:72:a3:20:65:55:29:89:ba:a9:
a5:7d:9a:f4:b0:0a:71:a2:b4:bf:2c:9d:53:f8:7d:
39:73:fc:6e:99:76:52:c0:4b:03:27:8c:4b:63:a5:
a8:54:66:c4:a2:32:d5:ce:df:05:09:89:72:d3:34:
b0:e2:f5:6d:bd:82:96:cb:97:e5:9d:3d:d4:2c:b0:
a1:43:af:74:5e:3d:0d:96:6c:f8:23:03:fd:50:a6:
40:8a:5d:34:a7:50:ea:43:b4:c2:05:c5:55:1f:e9:
a6:bc:23:9d:33:4a:1b:ea:ae:a9:ba:91:08:ce:2e:
d0:25:9b:6a:a9:6d:b8:d3:a2:0d:66:05:e6:c4:39:
99:1d:de:3e:c4:ec:91:b6:9b:d2:db:15:27:1f:23:
e7:b2:12:01:95:33:47:56:89:f8:69:26:4a:c5:4d:
95:2a:6d:43:d9:78:15:36:98:47:ef:1f:e1:35:71:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:2B:55:E5:4C:75:2F:95:D5:16:57:BC:03:C6:F0:9D:C5:D5:55
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:76:be:63:82:bb:f1:6c:6e:92:71:e4:d1:92:cd:00:80:
69:15:3c:ef:9c:21:8a:2c:8c:a0:c4:56:8a:58:ad:41:a1:d6:
e7:81:81:6a:da:d6:86:8a:5b:79:63:5a:90:16:91:7b:d2:f4:
0e:64:10:71:15:a9:44:5c:2c:65:ce:b0:f6:5d:73:fe:9c:84:
45:72:b9:c5:3a:25:a1:90:bd:02:03:13:f4:3c:5b:a7:3e:18:
fc:88:e6:8f:6a:37:b7:02:89:ba:af:44:9e:da:9e:21:a1:5a:
d8:e5:31:8d:f5:85:fe:00:f4:ca:34:03:60:ba:f9:9d:40:84:
d8:9f:d4:b0:7d:43:3d:30:99:be:7f:83:0c:96:3f:3a:f8:5b:
58:98:5f:2b:c0:a1:2e:13:d2:04:ba:f3:0a:49:d2:7b:43:ad:
34:f4:64:19:11:36:57:4f:af:b5:17:68:4d:5f:cb:59:65:a2:
ba:09:a2:0a:1f:f4:0f:4b:66:ba:d9:a4:68:6a:16:1d:1c:79:
e1:16:1b:ef:31:f2:a4:78:43:0a:3a:c1:0a:07:a5:d2:fb:25:
ec:71:6a:ed:6d:d1:9b:3f:53:3b:7a:6f:5c:55:63:de:3a:fc:
d7:76:ee:68:7d:93:b1:3e:22:e6:e6:57:a6:8b:78:63:26:ba:
3d:bc:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:09:01 2025 by rpki-client