Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: qnQvcu2t9PCkTharXosvb47mctYHue+W3zjG/8YPO7w=
Subject key identifier: AD:73:D6:EF:D3:AC:42:42:FB:69:24:62:DA:C7:4A:30:E0:93:0F:2E
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 01976C991CB510C9F7FBF91221B5D37408D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 05EE
Signing time: Sat 14 Jun 2025 04:01:03 +0000
Manifest this update: Sat 14 Jun 2025 04:01:03 +0000
Manifest next update: Sun 15 Jun 2025 04:01:03 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: nmZhrBEFbkdyT9eVXjoB4xAhg9Ttk7Vh0/P222kFIw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1c:b5:10:c9:f7:fb:f9:12:21:b5:d3:74:08:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Jun 14 04:01:03 2025 GMT
Not After : Jun 15 04:01:03 2025 GMT
Subject: CN=ad73d6efd3ac4242fb692462dac74a30e0930f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:ae:bf:4d:d8:1f:51:19:b7:37:fe:ed:95:
db:6e:5e:c6:13:64:59:82:14:0c:6c:35:c5:7f:14:
a4:6f:23:16:47:e8:19:2e:f8:5a:e1:95:de:56:c0:
43:07:a1:83:e9:9d:d2:aa:72:77:5f:45:0f:d9:ef:
22:99:2d:f5:54:17:76:8f:67:8b:58:3a:cd:4a:fb:
f7:5c:cb:a1:05:43:8b:88:0c:84:c4:e7:9f:6f:6c:
6b:12:cd:21:17:b2:a0:a0:54:9d:96:94:23:6e:a7:
96:60:00:92:00:9a:63:21:10:92:67:bb:1d:64:1d:
d5:6e:02:76:ee:da:1f:7a:8d:30:93:70:63:31:50:
ec:b7:3d:a7:e9:9c:d1:0c:b9:4f:9a:bc:67:06:46:
de:e9:34:cb:64:86:97:11:5a:98:fd:70:1f:e3:e5:
aa:78:22:e3:ab:b0:26:82:8f:a8:67:b1:78:ea:a1:
09:2f:ed:68:6a:4d:b4:c6:6f:45:1f:b4:39:77:b6:
c8:88:5a:a0:0d:25:35:be:ff:21:69:fd:04:a5:d6:
4d:c0:39:0f:33:8b:19:a1:a7:b1:74:f6:6e:65:b5:
14:db:74:0f:ba:a4:3f:b3:d9:ac:b4:7d:52:6e:3b:
be:51:56:88:c1:68:ee:4d:23:cd:ea:22:2f:5c:3e:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:73:D6:EF:D3:AC:42:42:FB:69:24:62:DA:C7:4A:30:E0:93:0F:2E
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:d9:15:f7:3a:d5:27:ec:36:46:1f:79:c3:cd:ef:99:99:
ce:f3:5d:ac:f0:ea:5c:18:b9:ce:88:f0:3d:3b:b5:0f:c7:84:
18:84:9f:55:51:4b:e1:a2:79:7f:bf:b4:e3:e8:56:e3:03:19:
cd:cc:fa:12:5d:99:a5:ad:8b:3d:f9:2f:33:a7:eb:c5:40:ff:
9a:22:63:e2:db:95:ec:26:60:db:e8:c5:5b:e9:a8:20:d5:26:
64:50:c9:a5:35:3e:f5:e8:56:ad:b8:0b:a5:1e:2a:0e:b4:c9:
56:ed:89:f9:c1:22:2a:69:7c:23:c2:8a:b8:f6:3f:b3:a3:e7:
ce:a7:59:a5:f3:98:a9:1e:9b:c3:82:be:4a:43:71:81:5b:e3:
14:3c:f4:46:12:ca:d7:d0:58:f3:f4:32:7e:86:65:5c:f4:05:
55:22:44:f1:73:f7:37:5c:af:5b:c6:0d:d8:e3:20:db:23:3c:
3a:2d:bb:7b:bf:7b:99:c1:a7:66:f2:62:92:b1:5a:3b:52:b7:
80:de:2e:89:b2:f8:3b:6e:03:2e:86:71:b1:05:15:07:49:6a:
9d:af:c0:f4:af:ea:3a:15:35:45:53:d6:53:50:32:81:df:a0:
e5:95:f3:84:07:e1:75:06:ca:e6:6c:b4:46:39:46:68:31:f9:
c2:c2:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:43 2025 by rpki-client