Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: bqaiXphCowORyQZmalb1srFUR6J6/vETF/dBKIBOgQM=
Subject key identifier: CE:E0:E6:A5:BD:32:0B:01:E4:64:59:46:B5:10:DB:D2:DC:F9:FF:56
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01977DC2FF903C11FBCDFA6373A84F0E806C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0DE8
Signing time: Tue 17 Jun 2025 12:00:20 +0000
Manifest this update: Tue 17 Jun 2025 12:00:20 +0000
Manifest next update: Wed 18 Jun 2025 12:00:20 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: lBMqmsSmwZycqJdiIZ1JBECP7pS6ldObu7zxu40DK1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c2:ff:90:3c:11:fb:cd:fa:63:73:a8:4f:0e:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jun 17 12:00:20 2025 GMT
Not After : Jun 18 12:00:20 2025 GMT
Subject: CN=cee0e6a5bd320b01e4645946b510dbd2dcf9ff56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:77:a1:4a:8d:dc:64:f2:8f:2c:f1:6a:15:
37:6f:63:98:02:49:4b:ca:2e:c2:9f:bc:0b:32:76:
88:0b:75:b3:55:2d:f6:c4:d5:86:15:92:41:98:52:
88:84:19:b2:73:33:94:8c:df:2e:63:5a:c2:4c:a0:
f1:47:c3:e2:51:ec:6b:4c:ae:51:9f:72:0c:28:36:
0a:b9:07:e2:ad:bb:dd:8a:5f:ad:d8:ff:e1:df:d4:
01:f8:24:fc:ea:a7:a2:1a:b9:a5:a5:a3:89:0f:71:
14:bf:74:1c:2f:3e:2d:cb:5a:e5:ef:18:79:27:eb:
65:5f:bf:40:28:7d:d9:72:d8:75:9b:54:aa:b0:69:
79:8d:16:e8:52:fa:93:4d:e8:fb:3a:b8:81:a8:64:
f8:31:f3:bc:92:63:ff:54:61:26:95:35:b9:61:e1:
cb:62:bb:88:18:31:c3:db:cc:9b:53:0a:50:4a:d3:
c9:5b:5e:dc:21:7b:e8:4c:2a:7e:d4:f6:c4:ef:db:
e2:ee:52:e6:1b:16:0f:e7:be:68:5b:5a:65:9a:35:
57:ba:01:09:7a:e3:33:0e:f2:18:72:36:0f:be:04:
fb:9c:4c:d7:cd:b1:ab:a7:9e:e1:6f:fa:b1:52:58:
e6:1a:f7:56:51:66:ea:56:f9:82:7b:ec:51:2f:69:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E0:E6:A5:BD:32:0B:01:E4:64:59:46:B5:10:DB:D2:DC:F9:FF:56
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:9d:a5:33:83:77:44:41:64:13:26:13:2a:1b:1c:b9:4f:
75:72:bf:db:8e:53:a0:f6:ea:1b:51:f6:24:5c:d7:55:ec:14:
07:26:a8:a5:17:27:df:f7:27:a6:0e:68:07:ac:e5:63:6c:36:
42:41:60:a0:e4:da:19:a6:e3:7c:21:cd:03:9a:1d:c2:89:bf:
f4:05:a0:ba:75:b0:49:1b:95:b6:5a:fe:e1:f3:4e:1e:7e:18:
b3:17:5d:07:83:15:6d:f4:49:f7:93:f3:c0:de:60:b9:0f:0c:
e1:d1:a7:cb:3d:44:3a:a0:50:70:7b:fd:a8:99:4f:98:0c:51:
09:a4:2d:43:f7:eb:1a:42:e2:86:a0:20:4a:d5:6d:a0:da:39:
4c:1d:7f:5f:97:66:3f:9a:b4:59:d9:34:14:68:fe:73:65:ef:
b1:f6:5e:9c:d1:9d:53:c2:19:8c:d5:d2:d1:2a:db:51:85:cd:
b7:8c:7b:99:d5:8e:fc:5e:2c:85:0a:cc:c5:63:80:b8:a4:00:
87:c1:6c:38:6b:60:d4:c8:23:be:a9:6e:a7:04:b5:cb:6e:db:
b6:1f:96:45:e9:71:fe:94:9c:5e:4c:9b:ce:3b:19:9c:42:47:
8d:34:fb:a6:df:f5:9f:2a:c7:2f:27:b1:fc:4f:9b:ed:0c:97:
c7:9e:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:19:49 2025 by rpki-client