Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: iSbqv08pYBOS55M6U5ReUzP8uexSQxzLaQr1xDl5CZI=
Subject key identifier: 64:0E:20:74:73:EA:09:F8:BF:69:30:15:D1:A4:1A:8C:DB:41:B0:86
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 01978A363D3C3F265F2A429587B9D55108A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 09B2
Signing time: Thu 19 Jun 2025 22:01:39 +0000
Manifest this update: Thu 19 Jun 2025 22:01:39 +0000
Manifest next update: Fri 20 Jun 2025 22:01:39 +0000
Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: +/jxPD0H3qYyYY4KpUlqkXMQY7htzHGOKoXI2aODgyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:3d:3c:3f:26:5f:2a:42:95:87:b9:d5:51:08:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Jun 19 22:01:39 2025 GMT
Not After : Jun 20 22:01:39 2025 GMT
Subject: CN=640e207473ea09f8bf693015d1a41a8cdb41b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:64:de:30:4a:f3:02:c3:a8:76:a9:29:1d:
63:9a:8f:c3:7a:f5:43:59:9b:bd:fe:81:4b:93:25:
51:0b:c2:d1:d3:be:02:aa:09:7c:04:f2:eb:dc:79:
a5:1e:d3:02:42:6b:6a:4f:6a:d6:ab:c1:00:6f:ca:
b2:5f:63:31:85:b4:9f:d0:79:0e:8a:a3:46:6a:f8:
01:b4:a1:43:1f:59:80:dc:b9:3e:50:86:fc:8d:ab:
ab:12:7d:9a:7b:32:3a:31:c1:9d:43:b7:34:e2:e1:
ea:b3:c5:79:20:ed:c3:a6:10:bb:54:97:4c:98:65:
50:48:87:d1:a7:61:82:42:45:bf:eb:1a:b6:75:96:
35:9b:c2:de:8e:2f:e5:5e:e0:7c:6e:7d:cb:f8:c7:
7e:5d:0e:4c:5b:d6:a5:93:33:2c:a4:2a:31:57:15:
f0:ec:9b:8b:8c:34:3e:c9:e8:de:5f:33:7c:c8:a8:
66:df:29:e0:7e:bf:6b:5f:bc:f0:63:60:ff:de:91:
80:f1:64:1b:0f:7a:1b:6d:03:55:24:f4:b3:90:0f:
4a:82:bb:fc:9e:9c:22:70:f3:7b:07:07:c6:c4:32:
22:ab:c8:a8:f8:e4:d3:fd:37:98:c4:cd:3e:c6:04:
a5:e4:ae:7d:76:50:9a:74:37:ee:40:bd:fc:2d:8e:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:20:74:73:EA:09:F8:BF:69:30:15:D1:A4:1A:8C:DB:41:B0:86
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3c:8f:8b:d8:ee:a9:6c:9e:bd:a6:09:6f:38:94:ea:94:77:
15:15:0a:4a:33:b9:6d:92:00:7f:91:2b:7d:09:3d:f2:4c:4d:
a0:98:c9:5a:32:a0:f6:dc:f1:83:31:b5:1b:6a:ae:08:5b:9c:
27:af:5d:55:f3:da:1e:cb:00:e8:37:92:fd:18:08:05:5d:a4:
e1:dd:43:8b:bb:e9:f4:fb:1d:81:78:98:16:14:25:b2:f8:a2:
1e:78:6d:ed:e3:a7:e5:96:c0:b0:69:12:1d:b0:59:4b:81:f1:
9a:b5:3e:82:20:62:cf:f1:0e:41:f6:86:2e:82:7c:1d:be:2a:
2b:53:8f:e0:10:8e:de:eb:c2:8b:12:c8:1a:0d:13:64:d3:12:
7d:ad:d0:91:ac:73:47:55:d1:bf:ea:b7:10:d9:30:e6:f2:c4:
b5:d6:f6:0b:31:1b:47:13:2a:28:e3:3b:e6:bc:67:38:36:0d:
1b:c8:a1:0f:ba:46:40:e1:0a:fb:ef:6c:7a:8b:19:be:54:8d:
de:68:e0:88:78:15:bc:bf:6c:03:c7:3b:d2:09:bd:fc:00:f2:
af:0c:c9:f9:96:30:23:6a:39:d2:15:fa:5f:d2:b5:4e:2a:cc:
67:cb:86:5c:1c:5c:a1:c4:79:74:58:06:33:e4:57:52:77:95:
08:67:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:25:06 2025 by rpki-client