Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: 4tGoSGyC8K+f0RWJ/do55MI1ebTGJnrF++hckl26RX8=
Subject key identifier: 60:E9:0D:19:C1:42:4F:31:3A:F4:BC:B3:01:84:FC:58:A5:6A:F2:5D
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0197B7B316AC728B1A043153B56788508B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 05F8
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 9cKca2bi8NWG4aA4E+aTSSf37qtdwDZWFq9eW/0vM0o=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:16:ac:72:8b:1a:04:31:53:b5:67:88:50:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=60e90d19c1424f313af4bcb30184fc58a56af25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:59:dd:0b:ff:69:49:39:4a:79:5d:a3:37:
95:31:48:96:d3:bf:97:7e:4c:b8:69:51:12:d8:47:
76:f1:5a:5f:35:88:c4:cc:8c:31:ac:6e:3d:fc:08:
63:f7:91:2a:9d:cc:e1:de:a9:80:52:a1:57:33:6b:
0f:df:79:d9:3c:ec:2e:45:16:a4:c1:af:a6:48:f4:
71:c1:ac:53:d0:73:fd:b3:b0:8f:4d:fa:89:98:da:
58:31:a6:0f:ba:9a:43:79:50:69:26:37:c9:84:ce:
e4:4b:e7:32:9e:c3:81:25:a5:64:5f:f5:58:3f:10:
a0:be:ec:df:e1:db:38:40:62:0c:4c:8f:19:f8:e2:
83:05:6c:39:27:97:7b:33:a7:3e:d1:d7:78:d1:48:
27:a4:57:4b:d1:f8:bd:9c:3d:24:02:d1:92:0c:8e:
3f:05:fe:61:07:0d:d7:b3:a4:2c:86:32:2a:0f:7f:
01:51:fe:13:bf:8a:4e:79:fa:f1:7d:31:28:01:5f:
47:5d:b0:ff:cb:51:a4:98:23:96:96:77:29:c4:d1:
34:16:f5:42:37:10:e7:ed:3b:67:ba:b0:e1:d4:ab:
76:55:bd:bd:eb:1d:6b:63:98:52:07:67:81:69:2c:
23:82:21:7d:e9:41:30:95:94:f6:34:32:5b:6d:b7:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:0D:19:C1:42:4F:31:3A:F4:BC:B3:01:84:FC:58:A5:6A:F2:5D
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:02:77:c5:00:61:e8:35:05:6c:c4:c8:96:d6:ad:ab:88:2f:
37:87:27:96:aa:2b:df:1e:c4:de:ba:a7:82:ed:3d:dc:32:d3:
a4:d4:06:7f:d8:62:5e:f1:55:a2:04:a9:0a:31:ce:28:76:a4:
ba:cf:6e:76:07:ff:c1:e9:c2:de:d4:38:1b:a9:60:7f:a3:2c:
9e:45:6e:c3:dd:c1:ea:98:da:94:ad:f3:50:03:c3:61:89:41:
cd:9f:82:6d:f6:dc:f7:df:77:5c:58:77:de:00:9e:30:c5:f3:
26:3e:ec:97:28:ca:eb:83:96:53:75:bf:9b:a6:87:7e:6a:b8:
9f:0c:16:25:ee:c1:de:e8:d4:83:16:b5:e6:8d:00:91:a8:32:
9b:ee:85:73:55:bb:b9:83:57:17:8b:48:ce:97:5a:92:05:c4:
c8:97:99:e0:29:e0:b6:bf:12:65:25:18:77:3c:27:d7:2e:0d:
f1:a1:dd:71:ac:0c:aa:68:ac:9e:12:9e:c9:b8:e9:ec:0c:39:
19:25:1a:cd:8f:62:fb:8e:26:35:ac:ea:0f:14:28:3e:f8:a9:
37:73:e9:7d:f9:9a:8c:e2:84:11:32:96:94:57:b1:04:51:00:
ec:71:11:06:d9:8c:7d:f2:01:f3:63:52:66:36:05:22:34:2b:
52:88:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:20 2025 by rpki-client