Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: diiVheCjj6w1ux4lWVzl9B8QLKEolVcAhT+MsD+H9R4=
Subject key identifier: 65:D8:E5:2F:2B:8C:48:3E:9C:2A:DE:43:F1:4E:80:D9:CD:9A:7B:CE
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0197707555CFAE690B1C09EB2726B92B22B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 08C9
Signing time: Sat 14 Jun 2025 22:00:27 +0000
Manifest this update: Sat 14 Jun 2025 22:00:27 +0000
Manifest next update: Sun 15 Jun 2025 22:00:27 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: 6PciTHDD6RqOBCsjlbLdDN1cHWjWwSa5mqyNx6nllVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:55:cf:ae:69:0b:1c:09:eb:27:26:b9:2b:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Jun 14 22:00:27 2025 GMT
Not After : Jun 15 22:00:27 2025 GMT
Subject: CN=65d8e52f2b8c483e9c2ade43f14e80d9cd9a7bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:c8:25:7c:21:e9:20:c5:4f:d5:73:32:a5:
94:8d:64:58:2f:b2:b8:69:03:b4:e8:a7:cb:38:82:
2d:c6:f7:32:41:30:83:3d:f4:af:e6:79:86:ff:ef:
a7:20:9d:d2:48:8b:d3:4a:5a:dc:d4:f6:7f:f3:10:
81:82:07:ca:fa:27:02:82:64:61:12:be:cc:e1:a7:
55:7e:b8:0c:35:bc:f2:56:b7:07:7b:89:89:f3:db:
90:cd:a9:0e:3e:b8:d1:e2:54:a4:69:e7:2e:f8:33:
fd:bb:7e:05:40:99:b8:f6:3c:aa:63:39:5b:e8:69:
ab:ad:10:84:25:d5:72:82:f2:f0:76:a8:e5:3b:74:
6e:62:ae:e2:c7:1c:a5:65:40:c9:54:0c:08:8c:6f:
c7:92:b5:07:8d:b2:48:b8:0f:96:bb:e8:0e:cf:0e:
29:eb:95:ee:71:5c:cf:c2:92:d5:6a:36:29:20:1a:
2a:8f:2f:ed:9d:a0:f3:ab:ab:db:2b:9e:91:e5:b2:
ba:44:d6:86:d4:93:65:40:71:a5:e0:9e:9f:22:18:
c2:94:f8:cd:85:41:0e:60:86:1e:d2:78:e4:c5:c4:
13:e1:5e:c4:6d:ab:84:a8:f7:9a:3b:4c:f9:af:12:
78:28:96:01:e2:31:92:2c:00:f9:e4:cf:c9:3d:db:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:E5:2F:2B:8C:48:3E:9C:2A:DE:43:F1:4E:80:D9:CD:9A:7B:CE
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d8:d0:22:4d:9f:0c:c3:16:d7:e4:87:68:50:81:da:8b:ca:
c9:1c:ee:bb:55:87:14:a3:a4:00:ca:46:f8:20:a4:8c:e5:1c:
40:28:5c:8a:1a:f7:83:21:48:fa:d0:d1:df:46:d8:f7:cf:40:
06:58:59:a7:ae:54:a6:a9:c5:f8:80:49:84:2c:2f:54:86:db:
f3:0b:46:90:0f:88:d6:83:e3:64:a7:20:e7:59:e5:73:6f:0a:
e5:80:eb:8f:01:0c:cd:09:ab:c5:f6:e2:4b:4a:51:d4:9e:ec:
ca:4d:3c:70:b0:fc:e4:ad:5c:fd:3c:da:df:c1:17:ce:d5:60:
47:09:86:ad:32:00:7f:d0:12:b4:8f:b2:a4:a6:f3:90:11:e7:
f3:46:cf:79:da:d9:e0:f9:7b:d9:87:e5:04:d7:ed:90:fd:3e:
c7:96:dc:bc:84:f0:c2:1d:af:cf:8e:82:ce:21:a2:6f:4e:39:
68:08:7c:0a:24:f0:07:e4:04:a9:21:79:d9:e4:0c:45:1b:8c:
34:03:1d:8b:62:7a:ef:dc:ef:6c:18:3b:b6:3b:d5:7b:69:d7:
f7:58:a4:c5:ee:1a:1c:68:eb:4c:b7:f9:df:90:e3:16:c2:de:
29:66:78:87:de:92:de:bb:40:2e:06:9c:40:7e:b0:ca:ee:2f:
e0:a2:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:50:42 2025 by rpki-client