Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: GuiIyBomEVPyzCc8ijwD0Z4DYj+6oIYLzWUBNVY8Cu4=
Subject key identifier: 6B:E6:DF:53:35:D3:3B:6E:67:6F:C2:9D:AC:21:A9:EB:FA:FD:E4:DF
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0197B6D782B0759FE03E3FAAA13478EF8628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: psvixq6sDpwJXlzIQO31oA9JaqaOSzMHts8AazKNGXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:82:b0:75:9f:e0:3e:3f:aa:a1:34:78:ef:86:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=6be6df5335d33b6e676fc29dac21a9ebfafde4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:4f:0d:2a:29:8f:a9:6c:cf:e8:a4:94:5e:
ca:aa:38:cc:d2:c7:5d:6c:25:dc:0c:13:e4:b0:94:
5a:07:b1:fe:d5:c2:ff:0d:73:5e:1d:80:f3:0c:b2:
ed:10:19:06:e2:1f:46:cd:25:2f:35:b3:97:91:a0:
c5:62:9a:d0:79:69:f8:14:28:46:a8:89:2f:37:2b:
5f:eb:45:60:45:fa:ae:fc:10:30:d7:f1:10:07:26:
e2:bb:29:ee:97:e2:d4:4f:0e:01:26:54:76:fb:bd:
18:4c:10:59:5b:cb:05:bb:b0:2f:30:ec:a9:8e:72:
3c:56:4e:27:69:ce:b4:f9:e8:55:c5:ba:b8:68:df:
99:e4:78:14:ea:59:bb:f9:68:94:31:d0:a5:c6:a3:
9a:7a:30:ea:78:a9:9c:c9:6e:78:d6:5f:74:ca:c0:
1c:ea:77:7b:9a:68:c5:4f:02:b4:d9:01:09:bf:50:
5b:41:3b:fa:7e:d4:35:7a:9b:48:7f:fa:aa:e9:5f:
df:5a:4b:dc:08:d6:74:c2:e7:16:27:62:80:8a:c6:
fa:fb:f7:1f:20:9c:46:49:d2:03:85:cf:2b:b1:6d:
5c:2f:d5:92:2d:21:a6:56:33:08:8a:40:39:61:e6:
09:b3:a1:38:6f:d7:ab:56:6b:dd:ce:9f:de:09:b1:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E6:DF:53:35:D3:3B:6E:67:6F:C2:9D:AC:21:A9:EB:FA:FD:E4:DF
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ba:69:2c:1c:e0:e8:bd:b8:71:4d:45:88:73:b7:01:68:28:
7a:ba:a1:0b:0b:83:55:57:11:ac:18:12:1c:7c:f6:cb:bb:ea:
0d:b2:d9:06:96:94:7d:cc:72:c5:1b:d0:54:7b:2f:3b:4d:35:
9c:75:29:87:e4:66:a6:74:7d:be:76:86:73:a3:b0:f8:70:f5:
6d:2f:c3:ae:50:44:6e:25:b2:b0:2d:30:3b:27:36:25:c1:0e:
30:56:38:c2:a1:ea:ce:9b:11:ed:3b:57:6b:8f:58:95:4c:f9:
19:a9:46:2f:1c:6e:56:ac:ab:71:85:45:f3:32:c1:a9:44:24:
be:30:50:fd:40:65:db:13:d2:96:05:2c:28:78:f6:87:04:45:
cb:81:a9:67:f0:97:ee:dd:b2:2a:c3:c9:88:7e:01:2d:3a:90:
d5:87:1c:50:cd:7a:ec:bb:c0:29:15:f2:ff:41:f6:ee:65:f0:
58:21:f2:42:35:3c:42:9a:90:e0:f8:b7:2c:3c:aa:aa:c7:49:
84:80:15:06:3e:94:83:e3:23:7b:2a:f9:61:c4:69:01:e1:a8:
f5:c3:74:cc:af:f5:fe:c2:02:e2:37:7e:11:ce:01:37:90:49:
79:37:35:9b:5e:6e:a1:42:b6:99:ae:cf:29:f0:8d:57:55:e3:
50:f6:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:34 2025 by rpki-client