Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: RJ3zlMEr+ZhtUhb+TYWiEJg8sW+0bvHALTlE1e3VOCE=
Subject key identifier: 1C:93:76:04:E8:D0:35:E3:C6:42:26:67:56:03:23:7D:57:C0:26:2A
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 0197B77C5528B2152DCFAE160A9DADE61325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 1428
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: hMEW56YlT5lR91SqGO6H3aurkaBQye4RXeF9Mb/YT6Y=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:55:28:b2:15:2d:cf:ae:16:0a:9d:ad:e6:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=1c937604e8d035e3c64226675603237d57c0262a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:f3:d7:75:43:bc:34:bf:97:26:0a:5f:d3:
18:2e:1a:f1:41:9f:2d:04:5f:7b:27:f7:bf:0a:ab:
da:c8:ba:f5:e3:ef:5c:f6:85:4e:33:5d:4f:46:77:
28:a0:e5:78:6c:e8:21:18:f9:0f:ad:00:8b:b2:da:
4b:c9:ba:87:ce:9b:34:87:0d:dc:f2:ea:8c:41:23:
28:8d:5c:01:2b:3f:61:aa:e4:1b:74:38:7f:13:f5:
c0:3f:ea:73:06:e0:ae:42:6f:81:6c:9e:d6:1c:f3:
b9:a2:30:fc:5a:dd:79:53:8b:c9:71:70:9d:c3:cd:
65:cf:7d:48:25:51:40:2d:58:80:13:7e:53:5a:32:
e6:e2:9b:c4:f0:fb:aa:45:b9:ef:56:46:fe:b2:6f:
da:d5:32:d2:05:3d:d5:bc:24:60:84:1c:ac:1c:48:
c1:50:90:98:ad:a3:09:c2:45:6a:c0:86:d5:f5:d1:
e3:f0:cd:48:ec:7e:9e:87:2c:f7:84:8c:06:76:f8:
9e:aa:2f:ad:5e:99:e8:3e:26:3a:13:6c:0b:7d:46:
5c:e7:59:40:76:af:03:dc:81:6e:cd:88:e8:3e:42:
72:49:d2:22:00:15:ae:f7:18:d3:4f:9b:51:f3:66:
86:3f:91:c7:f8:e2:52:4e:4c:80:38:a1:2a:c9:ba:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:76:04:E8:D0:35:E3:C6:42:26:67:56:03:23:7D:57:C0:26:2A
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:be:bf:df:ff:0e:d5:f0:56:11:14:82:4f:b1:78:d5:87:71:
58:67:58:9f:b7:41:e8:cc:d9:6b:5e:7d:dc:92:fa:e8:42:48:
90:80:fe:df:ce:9e:0a:6b:6d:bb:dc:74:92:99:ce:72:60:3f:
dd:45:32:ee:f4:c7:f0:b4:66:b5:91:a2:16:13:ac:d2:72:9b:
ff:99:08:92:cd:2a:14:35:62:98:2e:8c:13:c7:84:36:65:83:
c8:15:6c:0d:68:5a:4b:b8:06:99:64:b2:55:b1:a8:aa:f2:d9:
3c:37:91:28:2c:57:06:3a:e1:de:d4:ca:cf:88:49:13:09:dc:
67:9f:ea:f4:16:e5:08:9a:e6:ad:36:ca:c6:cd:83:f0:56:33:
55:23:a9:67:a7:cb:b2:f2:51:f7:3c:00:99:cf:4c:f3:a1:95:
08:b4:7e:d5:98:99:49:9b:46:20:4a:32:c4:4a:2d:9e:77:5b:
f9:b8:5a:44:2a:7e:ab:1d:20:54:be:42:c7:fc:ed:ec:8b:dc:
3b:dd:3d:c6:d2:12:5c:30:0b:d6:a0:49:19:00:33:c5:93:1c:
1f:aa:b6:c0:5d:bc:a6:ce:d4:a1:90:37:6f:f3:c5:13:5d:7f:
47:dd:54:66:8f:17:a5:ba:db:5e:c7:1c:ce:cb:49:e1:e4:14:
09:d4:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:50 2025 by rpki-client