Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: 5rh9cMZx8bt6+R/adj+RcjTl2Bxq8+BdjExLf3ZeHPA=
Subject key identifier: B8:14:E3:24:22:E4:0B:61:0B:FE:54:46:4B:C9:2A:3D:0E:BD:B8:92
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01976CCFA16C7675C10F1BE642F7B720CB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: YgNXrzKQPIyMEX2owtk3+sc6J23Go0EdAbNsQn6vPPk=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a1:6c:76:75:c1:0f:1b:e6:42:f7:b7:20:cb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=b814e32422e40b610bfe54464bc92a3d0ebdb892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:6f:30:97:11:c7:52:29:65:e4:bf:62:9e:
b3:14:fe:fb:ac:cb:e1:1c:27:02:cd:c3:31:cb:e9:
0d:16:06:92:b8:c7:40:8d:04:b4:c8:df:48:a3:05:
00:54:0d:75:e6:f3:7f:04:cf:52:67:4a:84:be:3d:
16:c9:0c:11:99:b7:3e:61:11:cd:75:43:52:74:6c:
29:75:89:9b:84:10:fe:93:38:90:49:d1:25:e9:e9:
c5:c9:d0:e9:d0:a3:b4:5c:06:29:4a:04:38:d0:b8:
d9:52:94:9a:94:79:b9:46:cd:1b:c2:bd:e0:9f:d6:
b0:7f:7f:c2:21:86:a6:fc:4a:84:d0:ea:da:b6:de:
e8:11:74:e1:96:96:ff:bb:ce:4c:ec:b9:bf:2d:b4:
86:9b:15:f1:25:53:e8:db:c2:7f:1b:24:e0:26:2f:
ec:07:61:00:90:3a:92:08:31:3e:8f:7d:73:46:0f:
e3:b9:f6:c6:d1:b3:2d:c1:39:34:d0:c2:1e:53:6f:
0d:3e:6b:4e:29:15:a2:d9:95:8c:71:ea:d5:6c:e0:
6b:ce:ff:eb:63:bc:c3:83:65:a3:91:74:fb:7a:fa:
4e:bf:a1:77:7b:bf:ce:74:3f:e8:20:3f:b9:08:21:
a1:ea:21:11:8d:cd:d6:d0:df:b0:e3:dd:89:ad:51:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:E3:24:22:E4:0B:61:0B:FE:54:46:4B:C9:2A:3D:0E:BD:B8:92
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:42:80:a8:d7:af:9c:32:2f:3b:ce:d3:02:a5:0b:f4:07:
af:7e:fa:91:74:4b:b0:1e:60:7d:1c:d5:01:5e:13:49:c4:4d:
89:90:2b:d5:0e:d9:b8:98:a2:df:11:f1:c2:72:3a:47:cd:4f:
d2:5e:33:7b:fd:86:95:73:03:6f:8a:02:93:d1:7e:6e:52:d2:
88:4a:a9:14:96:c3:d0:33:de:8e:70:a8:4e:39:3f:f0:07:97:
6d:c9:c1:9a:fe:1b:58:f9:0b:68:7c:a8:d6:34:55:53:59:c0:
8a:8b:bf:3f:ef:8a:ea:10:8c:b6:7a:20:da:7d:ad:63:d8:88:
43:98:07:2c:72:9d:02:02:e4:66:3d:47:ab:5d:19:df:c5:42:
17:4a:5f:a3:cb:40:51:9d:ce:b8:8e:74:69:96:03:42:87:35:
bd:30:7b:43:1d:6a:ca:5b:26:aa:42:c8:c5:4e:d4:8b:5d:ea:
fc:82:36:47:b7:67:62:b5:d5:6f:fc:15:35:b2:8f:52:93:d8:
40:cc:cc:5f:8e:cd:5e:3f:71:c3:54:0e:9c:69:9e:65:b4:5d:
b3:2b:f0:e5:7f:9c:f5:cc:fc:02:64:4f:6b:b0:e2:6f:9c:d5:
0c:f4:ea:c1:d2:27:8f:f4:7e:36:34:95:75:e4:97:90:b9:72:
81:d2:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:21 2025 by rpki-client