Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: 2bXTLN9KSEJMW3GbcV1Oo48OmwZk11AY+F8R7QtJMUU=
Subject key identifier: 63:F8:9D:E6:F9:FE:98:21:5F:E5:13:F7:3C:CB:AD:BF:69:3C:26:CA
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01976EBDE683243763351C98FA8107CE150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1555
Signing time: Sat 14 Jun 2025 14:00:28 +0000
Manifest this update: Sat 14 Jun 2025 14:00:28 +0000
Manifest next update: Sun 15 Jun 2025 14:00:28 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: T6fDBKzKn35y0Wtris/33v3GVA04icpk9A4B99J//S4=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e6:83:24:37:63:35:1c:98:fa:81:07:ce:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jun 14 14:00:28 2025 GMT
Not After : Jun 15 14:00:28 2025 GMT
Subject: CN=63f89de6f9fe98215fe513f73ccbadbf693c26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:47:a3:a8:f1:a4:01:9e:3c:d6:32:1d:f4:
af:9e:b9:5a:6a:ae:61:cb:61:49:27:31:6a:00:02:
b1:c0:b8:04:b6:9a:55:ec:aa:e9:1a:d7:1c:d7:fa:
45:b3:8f:e8:66:d1:94:0d:27:a7:d0:fa:db:c8:9f:
a6:74:97:e0:9b:b6:14:00:36:24:7c:a0:64:76:09:
61:cf:45:83:31:af:fe:9c:f2:05:18:aa:b5:f8:09:
2d:5b:1b:b0:61:a0:4a:db:2f:f6:c6:63:5a:c6:b8:
26:ba:c1:53:e4:d9:36:fd:98:8f:f8:d5:16:4e:92:
68:8b:2b:59:3c:82:ca:6a:d4:b4:f1:73:68:9a:9c:
68:5c:d0:a3:0d:03:ee:73:68:6b:0f:31:dd:98:be:
a5:e8:56:35:82:72:9c:30:9f:c0:f5:2e:f4:2d:8b:
df:8b:26:af:d9:d3:bb:3d:3f:25:5a:91:89:bd:1f:
67:8a:bd:5f:eb:06:4b:1d:90:54:dd:d1:53:d3:87:
1f:18:56:e6:74:7f:98:2b:dd:51:cd:30:ee:98:1e:
24:ad:43:6e:e1:bb:18:0e:d7:9a:72:42:15:e7:91:
59:fd:75:b3:b2:51:64:13:29:c8:50:ab:3d:9b:55:
c8:30:b2:70:b7:00:3c:2a:bf:66:c6:51:91:2b:99:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:9D:E6:F9:FE:98:21:5F:E5:13:F7:3C:CB:AD:BF:69:3C:26:CA
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:46:0c:7c:3f:c6:29:6f:7f:52:fa:83:7b:8f:9d:73:7f:05:
ad:32:9d:e1:d7:81:78:56:14:7c:81:32:20:3b:c3:23:a8:5b:
29:e9:ce:43:bc:77:3b:61:0e:18:6d:bc:c4:43:56:62:3e:82:
2e:4f:94:45:2e:7a:32:67:63:43:a5:99:2f:33:b0:76:6e:79:
4a:59:3c:2c:e4:87:03:98:04:f0:38:b2:68:4e:4a:ab:65:04:
2d:1d:bd:c3:03:29:cf:99:8a:d7:4e:66:23:1c:58:0e:60:84:
e5:00:d1:be:31:a0:c7:68:b8:be:d7:bf:dc:14:27:fa:54:45:
8b:74:5b:74:14:f4:eb:f3:51:86:fa:0e:8e:1b:b7:7d:ae:1a:
9a:2b:a2:18:c1:dd:78:cf:13:c2:17:ac:5b:e6:3e:47:ba:5e:
97:78:9b:ce:36:ab:ae:48:5c:00:8a:f0:4d:87:7f:57:81:9f:
b1:a7:40:54:5a:87:00:51:0f:b1:16:eb:8d:2b:71:52:f2:6f:
07:c4:67:3f:cb:2a:e5:62:a2:07:81:b8:0f:5d:4f:fc:77:6d:
c1:e3:3d:d2:73:35:c4:51:5e:d2:1f:36:74:2f:4c:14:eb:5b:
f1:3f:e2:1e:2c:78:15:ec:33:71:96:5b:2b:f1:4f:1e:24:19:
62:91:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:29:11 2025 by rpki-client