Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: Yt/eRVNkqVcfxz+iDqTz2dj18Ce2jeFS14NSlbYzABo=
Subject key identifier: E6:F0:A5:FA:50:E9:84:55:7D:E5:5A:FA:29:97:AF:26:A0:3C:EF:D8
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01977263E7876AFECE60554110DED15335D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1120
Signing time: Sun 15 Jun 2025 07:00:39 +0000
Manifest this update: Sun 15 Jun 2025 07:00:39 +0000
Manifest next update: Mon 16 Jun 2025 07:00:39 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: eFI+sOISHulFDDdTpX9i8YybPv3BdGRmjw2XmgNG590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:63:e7:87:6a:fe:ce:60:55:41:10:de:d1:53:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jun 15 07:00:39 2025 GMT
Not After : Jun 16 07:00:39 2025 GMT
Subject: CN=e6f0a5fa50e984557de55afa2997af26a03cefd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:a1:35:98:fc:41:76:93:07:66:9c:7f:72:
ea:4f:a4:a3:17:27:7a:01:d1:35:9b:91:7d:6a:90:
17:27:71:60:27:de:19:9b:a1:7c:d8:02:09:13:75:
9e:80:5e:87:ad:ee:a9:68:56:25:2a:03:23:2d:65:
25:11:1e:55:b0:92:77:11:4c:0f:1b:98:c3:ca:c0:
29:ce:74:49:ac:ca:f0:5f:ca:3d:15:1c:11:64:3e:
40:bb:d1:9f:ea:4e:6b:20:be:19:35:a7:16:7c:ce:
f5:3f:0a:8f:0d:1a:82:fb:ab:27:a1:cb:c1:9f:e4:
60:a4:66:22:c3:74:19:1f:ed:29:17:17:44:dc:fb:
21:8e:f5:dd:6c:e0:e2:f4:1a:f5:b8:dc:90:05:e2:
b7:78:60:fa:bc:a2:a2:af:1d:89:55:08:b6:29:49:
f8:70:73:f9:98:cb:0b:ac:1f:93:67:3b:3a:99:79:
8b:07:06:c8:76:28:11:5d:b2:34:a0:7b:25:cd:eb:
10:db:6b:35:7f:db:55:4a:8b:d8:f9:ed:8b:94:48:
77:cc:ed:2b:5b:d3:e4:38:71:a1:89:5a:cd:e7:15:
6b:cf:cd:b8:d4:54:cd:92:31:29:47:b3:98:48:e1:
1e:fd:56:27:11:af:a5:61:e0:9f:fa:a2:5e:d7:43:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:A5:FA:50:E9:84:55:7D:E5:5A:FA:29:97:AF:26:A0:3C:EF:D8
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:e2:09:c9:40:28:8f:a9:da:1c:3d:77:96:39:76:8d:4a:
e3:f5:e7:02:f8:b1:61:d1:8b:3a:e9:9c:08:07:b8:3b:47:f2:
28:d1:0a:ce:7b:7d:25:0e:d5:ed:91:0f:0d:7f:59:c0:48:57:
60:d8:5c:53:7e:1b:99:3d:b9:7e:01:96:c2:7a:8d:b5:d5:22:
8d:6a:7e:30:47:75:20:b9:65:31:4e:bb:15:54:98:f3:8b:16:
02:d8:d8:ae:04:4c:03:6d:4f:91:af:65:dc:cd:a1:56:86:0f:
f6:fd:78:b8:69:35:e4:1f:27:53:00:82:68:64:f3:d7:f6:bb:
e4:7e:fa:c3:f5:d0:e1:9c:ed:c6:15:88:51:38:25:00:0e:f0:
ae:48:ea:16:0e:d5:e3:2a:d1:82:5b:48:c1:b7:a3:d4:8b:ea:
ae:8f:d0:fc:f4:53:57:a8:fd:e4:b5:ca:02:18:2c:4c:e5:20:
35:f5:39:90:5f:e4:ed:56:5f:1a:95:01:cf:b4:1c:c9:24:9b:
10:96:42:d2:f8:9f:28:7c:92:c8:f6:70:e5:1d:c7:1e:68:ef:
22:e3:08:3c:61:41:86:69:d7:ef:f6:ef:34:30:36:25:d6:81:
77:b7:b1:58:81:ea:6c:76:48:c5:d8:6d:a2:d0:8b:29:8e:a6:
9f:2a:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:22 2025 by rpki-client