Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: bpi0TIBS2oIg9akItICqnogiqhLBCG9vEiaGpQfTLr4=
Subject key identifier: 20:63:A6:9C:F2:D3:52:3B:A4:E9:61:82:8A:39:3A:35:D0:3D:D9:36
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 01976DABF7E722FEBC9B050EDB8ED87C3A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 14F8
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: eMYh1AhCG+X780FlRVHn9Gsh6dtsmyaxVXD4RANmgB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f7:e7:22:fe:bc:9b:05:0e:db:8e:d8:7c:3a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=2063a69cf2d3523ba4e961828a393a35d03dd936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:8d:2e:b3:a6:5e:2a:02:78:d0:df:3e:69:
14:55:f3:0d:e9:e1:5b:15:36:bb:e4:55:b8:49:e7:
ac:8d:57:43:fa:92:4b:45:4b:87:e2:ae:1c:48:b0:
3c:27:26:9d:52:7b:76:25:37:c4:c9:5a:d8:12:38:
11:6c:6d:00:cf:73:0a:99:09:47:86:fa:d3:2c:cb:
a1:3d:69:59:11:bd:4f:07:86:66:24:6d:39:4f:20:
af:4f:51:8f:7b:52:48:3c:cb:cb:74:83:1b:07:2c:
9d:57:36:b0:53:e1:b8:b3:4d:2e:e8:cb:81:19:3c:
b1:18:eb:cd:3e:c6:44:db:94:9b:d5:19:1a:57:81:
ba:ad:29:92:79:bb:96:a0:6e:1e:8e:e7:db:09:19:
5c:2e:89:20:19:2c:54:75:ed:5b:72:40:fb:2b:a1:
7e:8e:86:5a:97:db:c0:a6:3c:c1:cd:50:67:3b:f7:
ee:96:e4:ce:b8:6a:2f:85:c2:c0:c5:6f:f0:25:d8:
d7:5a:de:45:2c:96:11:c3:70:de:40:66:c9:e4:52:
d8:af:78:74:f0:fd:cf:8d:16:df:fd:e6:0c:23:89:
e0:17:d0:c6:df:66:64:ad:0d:a4:8b:03:cf:24:1a:
11:43:98:74:33:c9:de:ab:44:3e:f1:9f:88:61:1a:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:A6:9C:F2:D3:52:3B:A4:E9:61:82:8A:39:3A:35:D0:3D:D9:36
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:80:1d:14:d0:7c:59:ce:2b:d7:eb:d7:6e:27:b5:c1:4b:62:
b6:d6:18:47:75:86:cb:13:b8:ca:e4:66:19:b7:fc:67:4c:ba:
8a:1c:3f:f1:dc:b0:91:20:ab:31:66:52:82:18:85:3b:7d:3d:
5b:ff:fd:0a:ca:72:f0:7e:3c:82:38:69:f2:b2:19:e8:b8:31:
b4:f0:2e:95:1f:96:42:55:0c:70:44:8e:b2:a1:cc:49:ad:c5:
4b:09:b9:d6:32:8a:69:f9:e8:ed:30:78:ae:68:24:18:76:12:
cb:ec:14:98:0c:9d:c7:10:cf:34:ba:3f:c6:d2:e9:a8:09:3c:
0a:61:ab:8e:42:1f:a8:a5:d9:d3:4f:6b:92:09:37:c1:10:75:
51:97:a9:f9:3c:a0:a4:11:b5:de:db:eb:39:40:08:73:ef:dd:
dc:0e:b4:7e:6e:30:b9:75:37:08:e9:9b:bd:28:55:ae:7f:74:
58:61:fb:c0:72:2d:af:1b:ba:26:f9:48:41:42:90:06:70:27:
c7:f6:dd:33:69:fb:9e:5e:4e:b4:7d:3a:f1:e7:28:8e:08:f7:
a9:e5:84:f5:94:97:d8:52:f3:ac:c8:7a:54:b6:72:d2:c2:9a:
5e:b1:c5:05:2f:25:10:b9:22:32:de:18:c3:8b:0b:fa:4b:ed:
5b:56:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:11:00 2025 by rpki-client