Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: rFt/P69V13md+pe1zjpKiB8xp7vqjbBq+Fgd9JfTUyc=
Subject key identifier: 00:EE:A6:AE:36:C2:4F:E9:15:D0:CC:06:43:4F:CD:9B:45:4B:0C:01
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 0197BFA3CD9141A2A0E0A95502C9E1AB62A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 13
Signing time: Mon 30 Jun 2025 07:01:12 +0000
Manifest this update: Mon 30 Jun 2025 07:01:12 +0000
Manifest next update: Tue 01 Jul 2025 07:01:12 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: 2KxS+2LjLmVMtjZ25qlRIARSwEJYr1t2yC0E7Rs9aa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:cd:91:41:a2:a0:e0:a9:55:02:c9:e1:ab:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Jun 30 07:01:12 2025 GMT
Not After : Jul 1 07:01:12 2025 GMT
Subject: CN=00eea6ae36c24fe915d0cc06434fcd9b454b0c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:83:fc:3d:d6:ad:9d:28:5c:ae:3b:88:1b:
9b:64:ba:70:65:5d:f4:1b:8e:ac:ec:08:6e:79:43:
7d:00:b8:ba:2a:8c:67:2f:8e:67:96:06:1f:2e:da:
57:4c:9f:e4:c6:84:9f:2d:8e:b4:e4:09:1d:2c:08:
7d:3f:25:9f:68:db:f9:8b:ae:23:e3:37:c1:9d:19:
d6:ed:bc:fc:1f:76:f6:c9:2a:21:69:25:34:f4:56:
24:e7:86:39:4c:e4:97:93:b1:43:f5:45:0d:47:63:
58:8e:8a:4b:02:34:c4:fc:73:98:22:c4:ce:09:2f:
40:40:40:ef:09:2b:63:d7:06:40:33:51:a0:ef:1c:
35:17:5e:87:17:6f:8e:c3:57:67:24:8c:84:d6:8c:
fb:2b:33:52:20:9f:95:ab:bc:9c:20:62:1a:90:f0:
ca:31:c1:15:34:25:16:03:0d:6b:f6:c6:d8:51:fc:
e2:20:d4:a8:d5:a4:62:95:75:a4:4b:ac:93:33:c7:
69:29:97:d5:a2:21:b5:b3:da:97:14:a5:81:9f:77:
39:fb:a5:50:63:64:82:7b:4f:d9:bb:97:5d:94:f7:
34:47:a6:53:9d:15:3d:5f:7c:c2:54:9c:8e:ab:4d:
0e:41:d5:72:92:7b:e1:a0:1c:1f:2b:28:23:2e:e8:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:A6:AE:36:C2:4F:E9:15:D0:CC:06:43:4F:CD:9B:45:4B:0C:01
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:70:8e:95:59:8e:ee:53:cd:81:ee:ab:6b:89:3d:11:9b:eb:
17:f1:12:10:b5:13:4d:2c:d0:d4:10:41:05:21:0d:f6:5f:27:
bd:9b:f9:74:da:36:82:ae:09:b0:8b:27:a6:ac:92:09:59:4b:
42:8d:e1:1d:ca:25:7a:4c:f6:c6:8b:ea:ba:1e:8c:f4:04:a8:
27:8a:d2:f5:db:3d:41:79:15:b2:e8:7a:9b:90:68:3b:a0:24:
0c:e4:d1:0b:e1:c8:9b:8e:83:7e:73:cb:91:55:21:5a:05:d5:
39:93:6c:b2:8c:3e:63:b6:90:48:48:8b:bf:87:67:c1:f1:d7:
1c:5a:a5:e5:e8:73:85:d3:a4:33:28:d1:5d:10:a0:0e:7b:e6:
3d:60:ae:7d:8c:1e:03:ea:54:73:19:ef:01:68:c2:72:18:f1:
bd:c6:e4:8f:5e:15:06:d1:34:f5:df:8c:6d:8b:25:8a:fa:48:
2f:4c:6e:96:e1:09:c6:ae:6c:0c:01:71:1c:28:13:2d:04:83:
91:06:db:e1:f2:1b:6a:e2:de:1c:b4:64:70:c1:dc:ab:c3:e2:
14:70:f6:75:44:67:3d:04:b6:2c:e8:cb:fa:a1:25:da:c9:ed:
51:e8:cb:fe:42:4f:ee:6c:32:31:d5:22:fd:e2:81:3b:68:f4:
7c:68:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:00:57 2025 by rpki-client