Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: YHyK7M0X8MMMMgUGViuwK12W5lnNDdixjLPOK4LF4Fo=
Subject key identifier: 29:90:57:7F:92:F1:C8:9C:83:D3:AE:02:B1:B5:1C:BA:97:6C:7A:D3
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01976D3E3D37593479CF68E79122EB420E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 159C
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: U18SPSBUf3dwumuu9FyNIqHDXLw.roa (hash: V5VQUyBsrAGopRO8qXTISlE1ORxyujJueAvt5anuNoc=)
5: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
6: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
7: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: Fdx1G8gQDFeLR0Zr7sNtKt7MjC6Fmsp6g5Ykodabn8c=)
8: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3d:37:59:34:79:cf:68:e7:91:22:eb:42:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=2990577f92f1c89c83d3ae02b1b51cba976c7ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:89:7a:67:27:51:60:35:80:d1:07:78:6c:
cd:a2:17:84:5c:fa:e7:6a:35:47:ca:62:44:67:61:
8e:11:83:45:4e:04:4a:c1:a0:a8:b1:52:bf:ac:28:
ed:0f:54:45:92:59:77:94:26:24:c6:cb:e2:ec:22:
4e:ef:9b:26:b6:60:75:87:32:4a:31:7a:1a:06:58:
9c:78:76:25:39:71:64:b3:56:a6:97:b0:98:30:d1:
41:0b:81:ed:ff:d8:57:d5:39:dd:72:1c:c1:0e:78:
d1:1c:77:e9:eb:a2:e0:90:95:32:35:db:ac:53:0b:
8b:51:17:57:74:b5:b0:ff:1a:86:6c:5d:f2:e1:76:
2d:17:34:b4:da:ff:df:b1:79:be:0b:38:97:b9:af:
db:4e:aa:99:97:c0:07:99:68:41:75:07:a3:3c:03:
70:65:0d:a5:d3:d4:dc:a3:32:7a:de:4c:ce:0d:95:
20:98:fe:24:a1:6e:82:36:b5:8d:5f:9a:63:47:1a:
26:5c:2b:9d:e8:e2:bd:07:2d:2f:01:90:a2:09:8d:
b8:23:b5:e6:cb:9a:cc:28:c4:dd:b0:a7:a6:a9:50:
f4:4d:2c:5b:c5:d8:e6:ac:86:eb:03:f3:9b:e1:b0:
77:b4:f2:5a:5b:0f:54:2f:bd:9b:be:3b:bf:07:78:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:57:7F:92:F1:C8:9C:83:D3:AE:02:B1:B5:1C:BA:97:6C:7A:D3
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:db:96:a9:a8:24:b1:60:df:b8:db:c1:45:55:08:e8:55:
c6:05:db:c2:31:3f:77:1f:20:c5:e0:8f:d1:84:b9:e9:29:3c:
a7:5a:98:e2:bd:94:0a:ad:46:bc:ff:bb:6a:48:e4:7f:61:54:
be:d5:ed:b2:ed:5a:7b:cd:e6:a9:12:a0:c8:07:7a:1a:d5:c7:
27:3c:f6:18:bd:c1:30:68:8c:03:23:25:e8:15:da:46:c9:02:
bf:40:5a:0d:ee:9f:18:97:0e:35:0c:32:99:f4:80:f7:c1:ca:
bf:76:88:57:e8:06:c6:6e:4b:8c:b9:9d:9a:58:0b:06:ac:07:
b2:0d:83:3b:62:18:10:9c:1c:77:ae:90:c3:d3:40:2a:7a:13:
53:2f:87:39:2a:83:08:70:c6:ed:4d:d3:18:cc:2e:a9:d5:45:
c1:3e:b1:0f:e6:5a:b2:23:e5:8d:d8:74:03:c1:19:80:53:10:
a4:5b:df:f0:b8:38:74:0a:6c:ca:7f:80:fa:f6:f7:5e:cb:87:
01:b6:01:e5:8c:91:4e:bb:a7:55:8e:bc:6c:71:d0:80:fa:58:
86:f3:a7:3f:75:41:98:e1:74:29:de:66:74:75:c8:76:e6:a3:
4c:25:dc:a4:45:9c:d3:8a:2a:a1:84:28:98:b2:69:78:16:10:
7e:48:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:11 2025 by rpki-client