Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: ka0FObqThWR41U00VLTNE4hEjfU8sUJ99G0KhehlnZc=
Subject key identifier: 16:25:F8:43:6F:66:BA:04:8C:BA:60:BE:43:4E:EC:CC:EE:2A:34:E8
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019776AEBE66E73E4AE2993CAAE3877DDD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 15AA
Signing time: Mon 16 Jun 2025 03:00:52 +0000
Manifest this update: Mon 16 Jun 2025 03:00:52 +0000
Manifest next update: Tue 17 Jun 2025 03:00:52 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: vxfJh5nA+7rFDo312fBlBMMshpXPAwHm1155rfOjIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:be:66:e7:3e:4a:e2:99:3c:aa:e3:87:7d:dd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jun 16 03:00:52 2025 GMT
Not After : Jun 17 03:00:52 2025 GMT
Subject: CN=1625f8436f66ba048cba60be434eecccee2a34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:a4:4d:4a:c8:c6:2e:f6:e3:37:1d:8f:7b:
94:bb:fc:d8:e3:f4:ea:9c:f7:d2:8d:9c:7c:45:12:
48:cd:a8:fb:f5:7f:f5:44:15:90:a9:02:e4:0d:d9:
e6:d8:13:3c:22:99:f0:83:17:fa:bb:c8:6f:e3:46:
11:e3:47:02:f4:3f:5b:0a:1a:12:01:51:5e:c8:b5:
ec:10:4c:a3:75:9c:90:f0:5d:ca:0d:22:af:e0:fc:
b6:50:9c:da:6e:b6:35:02:d7:5f:a2:82:af:91:44:
59:de:fa:d1:4c:01:5b:5d:51:ec:94:5c:c5:ca:e4:
b8:4c:ca:8f:89:79:7c:de:59:21:72:dc:a9:dc:b0:
38:89:3e:34:0e:6b:33:fd:ab:48:d4:d5:aa:0c:88:
53:a6:f8:b6:49:c9:78:06:b8:70:6e:c9:78:40:22:
b0:d9:6b:fe:b4:f3:aa:4e:70:ac:f1:e1:86:99:d4:
a0:93:37:34:17:72:1d:23:97:d7:15:e5:ac:2d:71:
f1:0e:07:57:c1:5b:44:f5:a6:8e:07:8f:d4:4f:3c:
9f:8f:90:46:28:a3:2d:75:e0:9b:56:82:8b:58:3d:
31:55:c2:de:b2:e9:9d:12:11:e0:92:f4:91:04:05:
77:0f:a8:79:fd:33:38:09:8a:b0:c2:dc:da:19:40:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:F8:43:6F:66:BA:04:8C:BA:60:BE:43:4E:EC:CC:EE:2A:34:E8
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:4e:97:55:f9:f3:48:9b:3e:0e:d5:be:d7:de:16:bd:a3:
be:40:df:6d:50:5b:1a:64:43:b0:22:49:98:cf:71:92:ed:b1:
44:5c:79:12:e1:26:2a:a3:0c:70:19:6f:50:76:6b:91:ba:0e:
e0:c6:1d:50:db:9c:16:00:12:50:6a:d7:9f:49:c4:8f:95:58:
9b:54:1c:79:48:26:19:8d:36:76:3e:a8:23:1b:92:2a:e1:68:
7b:08:fa:76:b0:70:03:83:9f:35:03:26:96:67:fc:da:95:ac:
0f:bf:fe:bb:f2:d7:98:51:93:de:4c:36:8d:76:f7:01:7a:b2:
55:cf:61:d0:61:6b:f5:e9:aa:07:f1:a2:99:20:62:42:fa:e5:
0b:c7:60:1b:e0:52:72:1a:84:39:03:71:e9:d2:20:31:a0:53:
28:e8:a8:6e:3e:8a:f5:aa:ec:a7:b6:8c:77:c5:03:b4:81:c2:
7c:6b:46:13:83:48:61:dd:ce:dc:e4:5a:ec:5d:d6:d2:24:37:
d0:56:6c:cc:79:b0:06:d5:ed:30:29:1b:0f:bb:c2:9a:24:17:
81:19:0d:d1:c8:d5:a0:21:71:2d:21:95:6b:9e:4c:b9:8f:55:
6a:77:4d:15:47:49:d8:a2:98:18:11:a8:7e:4a:c9:cc:51:be:
07:ea:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:27:19 2025 by rpki-client