Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: CmogR086PH5uR5ILOJDYqpBqYNm+WltGaudHlqwNKpw=
Subject key identifier: B3:2D:20:7F:0D:F5:D9:A6:22:8A:8B:CF:F9:26:33:40:46:4A:2C:01
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019771F66880B1F8CBC237FE52668DFBE8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 15A2
Signing time: Sun 15 Jun 2025 05:01:03 +0000
Manifest this update: Sun 15 Jun 2025 05:01:03 +0000
Manifest next update: Mon 16 Jun 2025 05:01:03 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: W8lBWnvTagOGCRhGtWKPJMPkjJ0RfaY05B1MQKj1/DU=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:68:80:b1:f8:cb:c2:37:fe:52:66:8d:fb:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jun 15 05:01:03 2025 GMT
Not After : Jun 16 05:01:03 2025 GMT
Subject: CN=b32d207f0df5d9a6228a8bcff9263340464a2c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:4c:80:d0:cd:6e:56:03:61:93:0d:02:51:
7a:97:b0:89:e8:74:9c:94:78:7e:7e:8d:42:31:2f:
f2:c9:45:38:b0:19:0f:db:73:39:6c:92:28:d9:dd:
ee:a4:d9:8c:27:7f:41:6d:77:4b:c4:bf:4a:85:60:
4e:e6:63:a2:62:35:69:d2:f0:22:0a:be:15:65:31:
30:cb:e2:eb:3d:a3:1b:61:5d:d7:9e:f2:81:81:01:
30:e0:f6:01:f9:b2:05:b4:ae:16:4e:2f:20:87:91:
21:77:4d:12:e1:fe:c5:cb:83:85:b9:d8:32:ba:08:
c0:1f:a0:1b:04:e2:09:ca:ef:24:42:93:3d:e9:5d:
62:f5:53:7d:bd:40:ca:3b:4f:2a:a8:f9:77:cf:5b:
0b:fd:9f:a4:20:3f:27:f2:ed:20:c6:6e:ea:cc:a9:
f7:ec:b9:2d:17:0b:5b:ad:8f:55:7a:fb:d2:40:dd:
69:e1:c6:7a:77:dd:80:25:0c:c3:88:9e:45:56:6d:
bc:51:30:1a:05:bb:46:fd:0c:19:6f:76:50:62:83:
17:c7:ff:3c:c8:eb:a2:fc:62:f1:03:bf:75:dd:a2:
3a:fd:59:1f:d2:94:0d:ce:4d:57:30:c1:94:e9:70:
1d:4d:15:71:cc:45:9e:c0:34:cc:60:82:92:44:73:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:20:7F:0D:F5:D9:A6:22:8A:8B:CF:F9:26:33:40:46:4A:2C:01
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:f1:cc:b4:5c:a5:c2:da:38:f0:92:7e:2f:a9:61:83:ab:
43:91:e9:c1:0f:8f:63:bc:5b:b7:7c:82:3d:33:aa:74:44:74:
2d:09:38:dc:80:58:59:44:79:d6:fc:61:39:40:bf:04:53:46:
b6:ee:4d:09:2d:c9:01:de:24:1a:d6:42:b0:6c:6d:03:5b:bb:
48:ef:a2:6c:20:03:e7:f3:e8:72:ad:18:a0:24:d4:8e:2b:35:
05:a0:cf:d8:5a:96:8c:f2:a2:02:7e:72:e0:08:e7:1e:1a:26:
8c:6c:06:95:30:db:de:a6:a4:82:e3:87:ff:7a:42:22:68:68:
21:df:6a:1f:a0:6a:a2:2e:8c:c2:be:db:9b:f9:d3:4c:95:e6:
d7:bd:66:a5:2c:6f:c1:4e:65:48:04:4b:bb:cb:8d:b5:5f:ab:
d2:ed:04:05:97:70:02:2a:4a:2b:75:ab:9d:12:4f:bb:80:a2:
23:57:fa:32:f4:77:00:83:db:95:9b:20:5d:b7:bb:c8:de:81:
a0:f8:02:f9:a9:7e:c5:67:f5:6d:ac:7f:7d:91:4f:6e:6c:66:
21:eb:ac:5d:16:41:21:68:6b:4b:06:57:f1:10:b2:f2:03:8c:
76:40:97:d4:91:46:20:45:26:a7:bf:31:f3:58:a7:fb:a2:ef:
78:68:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:57 2025 by rpki-client