Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: mtY3LsS5X8Tm/NGwdFHjypEPU25RBTzcpsWysGho8Lg=
Subject key identifier: 7E:33:34:D0:6B:C4:25:F6:81:C1:83:31:23:68:E4:7B:DD:57:F8:33
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019770E3A75BEEA3A5CBBCA99FA793AD12CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:57 +0000
Manifest this update: Sun 15 Jun 2025 00:00:57 +0000
Manifest next update: Mon 16 Jun 2025 00:00:57 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: zIlc6ZnPukQ5ZBj80SslF6LBBesU4UltiYci179Ujd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:a7:5b:ee:a3:a5:cb:bc:a9:9f:a7:93:ad:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jun 15 00:00:57 2025 GMT
Not After : Jun 16 00:00:57 2025 GMT
Subject: CN=7e3334d06bc425f681c183312368e47bdd57f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:c6:dd:79:bc:cc:72:b2:f4:f2:57:5d:a8:
26:2a:81:4a:45:f8:df:82:9d:91:45:10:a9:cc:68:
3c:d2:3c:c0:dc:85:18:fb:c7:2f:10:b1:d4:17:78:
73:90:e7:5d:29:eb:7a:ec:ab:3e:88:ec:48:f0:9e:
d3:40:b1:f4:f9:2f:7d:cc:ba:21:e8:6f:c3:ba:98:
d2:4f:bc:21:a5:e5:a1:cd:4f:e2:93:16:58:09:8c:
91:a3:e9:8a:2a:d5:4e:15:b5:b5:6f:95:c9:e7:d9:
7c:ee:cb:3c:e6:b9:65:3e:60:df:17:99:06:46:66:
d5:49:97:59:ed:84:a4:b4:37:1c:f1:3d:f5:c5:ef:
87:8b:3d:5c:55:ef:2f:00:96:62:0c:cd:b0:2d:d9:
9a:7e:c5:80:ef:33:83:07:c2:dc:0b:fd:e0:19:31:
c6:20:3a:8f:31:61:fc:6d:83:eb:61:f9:88:35:2a:
01:7a:cc:0c:cf:7f:7b:f3:75:a0:cb:03:c2:4e:ce:
cb:87:fd:85:c3:90:67:27:64:4b:4a:4c:26:20:9a:
b5:24:68:6e:41:7e:a0:84:4c:57:b0:d6:91:c0:88:
f4:95:a1:40:5c:28:60:76:e0:4d:93:ee:77:e9:5e:
49:33:aa:2c:f9:60:e2:4e:e0:45:1a:13:4f:9c:88:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:34:D0:6B:C4:25:F6:81:C1:83:31:23:68:E4:7B:DD:57:F8:33
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ed:6f:a8:f2:6b:35:1a:5b:5e:5f:27:1d:ac:22:26:c5:70:
f2:d7:11:c7:3f:92:10:9e:68:ba:d7:8a:fa:4c:ea:75:f9:82:
65:b3:95:07:d9:81:d4:c1:1a:f8:ca:48:83:ae:50:e6:ae:ea:
f8:68:96:49:ec:38:ca:d0:7c:de:c9:ad:41:9f:fa:9c:75:a0:
e4:be:bb:48:35:7c:db:91:4e:05:7d:bd:12:e3:b9:cf:4a:ea:
8d:62:60:9a:a1:f3:5e:a3:64:2a:fa:c6:79:b3:61:50:3c:50:
40:10:5f:61:e6:ef:7c:b0:3a:fc:b8:7c:c7:e8:6f:98:a3:81:
8a:f3:85:13:39:26:d1:5b:32:7e:9d:4b:f3:78:04:a2:6a:4f:
2c:17:1b:84:09:6a:5e:38:a9:71:c9:2c:b9:77:75:af:ab:c7:
d6:51:0d:28:be:2e:e4:b9:ed:a8:7d:15:17:01:84:be:39:0a:
68:48:e7:73:3f:f4:a1:3b:8f:e6:18:44:6f:cd:d2:00:a8:be:
58:b9:ce:2f:e0:7f:ad:f8:02:ae:c8:61:df:c6:f4:4a:92:1c:
c2:31:d4:e9:24:39:8c:68:bc:5c:ee:54:f3:35:4d:32:5e:3e:
9c:d1:ad:04:98:1b:d8:61:b1:1a:6a:c7:c5:3d:09:e1:8a:48:
c4:f8:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:25 2025 by rpki-client