Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: VPGH1ncD10VnkNSHiXgN02rdYhFKJfxqhyxpCbJwKaQ=
Subject key identifier: 30:5B:C4:CB:FC:60:FD:D8:2B:E4:7C:05:32:0A:91:E2:1E:53:74:D2
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019786623A971E613688E8246FD3F37F515A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 04:11:13 +0000
Manifest this update: Thu 19 Jun 2025 04:11:13 +0000
Manifest next update: Fri 20 Jun 2025 04:11:13 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: OKqLb+Mi+GaBKyzEqkDpAdBvS6x25kSQY3ntnUpYGT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:62:3a:97:1e:61:36:88:e8:24:6f:d3:f3:7f:51:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jun 19 04:11:13 2025 GMT
Not After : Jun 20 04:11:13 2025 GMT
Subject: CN=305bc4cbfc60fdd82be47c05320a91e21e5374d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:ec:15:47:5e:57:13:96:d3:c7:2d:aa:92:
7c:4c:9d:7e:75:6a:f7:25:9c:57:7b:9d:18:0b:70:
75:75:e4:ac:6e:ac:c4:4e:e3:3c:d2:75:66:29:ca:
0c:3b:a4:ab:bc:18:9b:26:fc:44:af:dc:a4:0c:8a:
7c:1b:f7:f5:5d:68:c0:d8:f8:34:2b:43:7f:5d:2f:
ca:13:3f:d6:a3:e3:d7:b8:14:fa:49:69:cb:e2:c2:
5f:a8:d9:88:bf:d7:ce:c5:4d:41:b7:6a:ad:9f:e1:
14:3a:9b:d4:d2:95:25:a8:65:fc:22:2f:ca:08:db:
ef:15:99:7c:71:29:91:e0:90:c3:c3:7b:b8:67:22:
19:99:ea:7b:0c:9c:f4:b8:6e:2e:9d:06:e3:4c:84:
9a:71:16:c2:bb:75:33:91:ab:57:6a:a4:4f:4a:3b:
46:07:72:6a:db:47:fe:54:0d:d4:2b:2e:5b:ce:15:
58:d5:e7:16:60:27:22:b8:5d:0d:9d:e2:e3:8b:b9:
57:a4:34:ee:22:06:10:a7:b3:71:8c:cc:d8:4a:0f:
ca:a1:9a:81:0b:5a:e2:9d:43:43:ce:9a:30:78:7c:
42:45:55:51:c9:df:9f:27:d0:b9:ec:ba:56:66:a6:
23:24:5f:ad:85:4b:5a:6c:84:8a:b7:68:68:77:49:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:C4:CB:FC:60:FD:D8:2B:E4:7C:05:32:0A:91:E2:1E:53:74:D2
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:66:b4:21:2c:0d:b8:14:b9:fa:71:9d:ea:0d:39:5b:bc:
7c:64:84:2d:8c:02:d3:2f:fd:57:7a:b4:e6:6c:4a:2f:de:39:
35:07:d4:f2:79:39:98:f0:dc:4b:f6:89:c6:a3:cc:ae:b3:e1:
2d:ef:8a:7c:8b:b4:09:49:e9:a1:f9:7c:de:81:fc:be:da:8d:
7f:82:fe:97:6f:12:f6:df:56:f9:98:e5:9e:2f:b0:72:5e:c1:
63:34:80:40:fb:f2:d3:36:31:2b:cc:44:07:97:f7:17:4b:b8:
52:60:2c:62:2c:5b:6e:56:17:03:ec:87:88:ba:ba:a1:d5:8d:
03:ee:6f:9c:cf:6a:3d:b7:1e:d9:6a:7f:74:b8:94:14:07:f8:
b0:78:a8:c4:36:81:af:22:b0:9d:98:2f:f3:46:c4:38:f6:8f:
c6:ac:2d:95:9c:6e:72:44:ef:06:ba:20:69:8c:06:91:46:de:
51:4a:a9:c7:e5:1f:ec:a9:75:f9:b2:3c:87:28:49:5e:72:f7:
6a:01:ff:31:b4:b3:ba:49:61:97:ea:40:48:65:7a:3e:30:b1:
a1:c9:9d:99:ad:e7:18:94:cf:12:37:95:7a:d0:b1:25:30:21:
2f:fa:88:b1:ec:e2:89:a2:36:34:e6:4d:2b:58:7b:3e:f1:46:
c3:24:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:40:57 2025 by rpki-client