Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: NWBTLRCsQ5vYOF2n8Dq+D2nxrTF6jZAHtM8NAid03YE=
Subject key identifier: CD:48:C3:C5:AC:3C:4D:4B:7A:84:7B:06:DE:19:9C:75:8F:56:64:E9
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 01976884DA831C28EEA57F0B40CCAB2D49A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0AC9
Signing time: Fri 13 Jun 2025 09:00:26 +0000
Manifest this update: Fri 13 Jun 2025 09:00:26 +0000
Manifest next update: Sat 14 Jun 2025 09:00:26 +0000
Files and hashes: 1: HzZn0ba7QItzyWun3HWfVhfe2Mw.roa (hash: iE4IEBeKKD6peBsX5m6y9GBML1LTBu1RqbqOosqLhr0=)
2: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: hnvUItj6T3SSjVKyydosaYgmjJTNs1x/vZK12U/d41I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:da:83:1c:28:ee:a5:7f:0b:40:cc:ab:2d:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Jun 13 09:00:26 2025 GMT
Not After : Jun 14 09:00:26 2025 GMT
Subject: CN=cd48c3c5ac3c4d4b7a847b06de199c758f5664e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:cc:74:7a:a9:67:c6:d4:f9:85:b6:dd:3d:
8e:20:17:59:9b:db:fe:e1:de:6e:4a:42:22:26:fb:
90:fe:7a:9a:39:73:4e:b1:ac:bd:0f:39:d9:6f:1f:
2c:1b:ff:a8:f4:b5:e9:74:74:39:08:db:26:ff:de:
d0:b4:f9:d3:9c:9f:6b:31:61:6e:37:59:cb:e0:a2:
05:4f:ae:31:79:72:60:d9:20:31:78:97:f8:ec:b2:
e9:54:d1:75:4d:40:ea:92:d5:28:81:f3:12:b9:d2:
d3:eb:d2:73:8c:53:ae:9a:69:95:44:af:f7:1d:9e:
5d:4c:f6:44:46:73:d7:89:77:05:00:a5:f0:73:95:
8c:bb:a5:f8:30:81:81:24:67:64:db:52:d3:27:b6:
a2:40:81:9d:db:e4:72:be:3b:87:a1:5a:85:d6:24:
10:f3:42:bb:47:77:2e:cd:4c:5f:a9:3c:a0:82:57:
e9:c1:f1:18:06:ba:f4:1f:d4:b6:4b:2d:d3:1e:38:
50:ac:91:4b:61:87:4d:44:a0:00:a6:10:31:8d:b9:
cf:9f:dc:f2:48:f8:d4:9d:f4:86:2a:a3:d7:38:f6:
5b:69:9f:e4:f4:ab:20:bb:61:5e:ab:0c:0e:6a:3f:
41:6f:c1:eb:d3:2f:6e:25:7f:a5:53:4e:69:7c:86:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:C3:C5:AC:3C:4D:4B:7A:84:7B:06:DE:19:9C:75:8F:56:64:E9
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:77:37:89:41:33:0a:80:aa:ca:ae:91:9d:19:b4:78:c2:dd:
4f:5c:0f:52:e4:47:c3:77:d4:6d:4e:54:a2:00:58:a0:0e:fc:
18:43:71:7c:52:7a:3a:df:0c:ab:62:52:c4:ac:8b:c6:3a:38:
9b:64:8f:95:03:9b:f4:b6:eb:f3:cf:c0:eb:65:d4:8f:bd:76:
4c:89:83:17:3b:07:3d:38:97:3c:78:02:91:da:fa:23:b6:9f:
61:2a:61:c4:59:cb:94:cb:26:ae:0c:e8:43:6c:44:4c:b4:93:
b8:5a:bc:bc:f6:31:ab:5f:dd:3e:70:d4:13:a6:6e:21:0f:66:
2b:1e:20:48:9c:35:f7:49:a1:2c:0d:fc:91:03:e9:15:54:74:
bc:1e:8e:24:dc:b8:1e:ed:44:0f:03:44:68:b7:98:18:78:a0:
47:6b:6f:cd:2a:d2:f0:5a:f0:5d:fb:6f:dc:b9:0f:53:4b:c4:
ae:a4:c3:50:ae:69:5e:95:5a:a4:a9:6f:23:17:45:01:c8:9f:
0d:c4:18:ee:51:09:be:cd:10:ef:7f:8b:4c:14:b1:9e:fc:4f:
71:36:6d:40:c3:42:56:a8:f9:23:bd:ec:99:f6:70:9b:ba:d2:
7d:d2:f3:c6:64:4d:5e:2a:d5:76:ce:30:f3:f8:8a:0b:cf:3f:
20:fc:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:56 2025 by rpki-client