Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: KU+xI2CObPNPbD8lwLp59ooof9o7ZtxvTtQ48RAunxU=
Subject key identifier: FD:C3:6C:42:FD:90:BD:C9:06:61:69:B5:D2:1A:CC:9A:84:32:59:B3
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 0197B632C8154F46405BD2B0CBB7BE902FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0CDD
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: o4c/JYgRE8KHxIjNTfwsZakJj+nQq1uo1yQVlgPxaWo=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c8:15:4f:46:40:5b:d2:b0:cb:b7:be:90:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=fdc36c42fd90bdc9066169b5d21acc9a843259b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:52:c4:f2:e0:77:ad:15:87:19:df:00:44:
fa:16:c6:d3:87:55:ab:99:2e:90:70:c0:12:fa:75:
c6:7b:03:75:85:9a:52:b9:0f:5c:5d:fd:60:ec:29:
1b:6e:56:22:21:e0:5a:04:f2:bf:d8:ad:47:c4:14:
d4:08:bc:23:f5:91:1c:04:37:21:a2:09:b5:75:c1:
47:ec:ff:50:d3:00:2b:f3:b9:1e:13:f3:ec:5f:e1:
3e:3d:23:1a:81:99:3d:ee:a7:ac:02:d5:dc:fb:39:
ed:df:44:2d:54:dd:94:15:55:2e:bf:a9:fc:4a:38:
f3:42:b8:79:8b:b0:ad:8e:7b:cc:00:1e:0d:ba:b4:
fc:44:f1:f4:69:20:3c:4d:88:58:b2:f4:2c:36:f4:
d5:69:1e:7c:c0:48:96:2e:ff:84:c4:59:83:e0:4e:
8a:f6:49:94:7f:98:65:ac:6c:e8:72:ed:b8:68:9c:
14:14:17:ff:f0:55:c4:fd:43:51:60:6b:4a:18:4e:
d7:15:64:63:26:83:0f:95:50:f3:a9:e4:d0:32:a5:
df:eb:15:0c:87:27:ed:c1:ec:ff:31:13:38:36:bd:
05:d4:e8:ad:f6:f1:3a:3d:09:33:45:fa:37:e5:22:
7e:dd:95:48:f9:cf:a2:f4:83:d9:76:94:c9:8b:ca:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:6C:42:FD:90:BD:C9:06:61:69:B5:D2:1A:CC:9A:84:32:59:B3
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:87:0e:cd:9a:37:b3:90:22:70:77:4f:02:8e:08:8a:23:b3:
29:c3:13:11:28:f4:a1:18:2e:61:38:06:9a:95:de:50:07:78:
6d:cf:e7:66:08:54:87:d8:8b:30:9f:09:28:5d:69:91:82:c9:
35:0f:af:ea:7d:17:11:83:c3:e8:c2:57:f8:57:42:bb:ef:70:
3a:1f:3c:da:e1:54:e6:cd:50:12:93:e5:dd:15:5f:15:12:5b:
3a:87:88:13:af:f1:8e:df:45:f7:c9:7f:c3:d6:ef:c8:7f:45:
8e:bf:c1:ad:e6:c5:25:4f:32:07:ff:1e:05:4f:4a:93:af:57:
9c:57:f4:96:ef:93:4d:c9:0b:d6:50:a7:ea:dc:4a:92:1a:0b:
f5:cb:3f:6d:48:4d:26:6b:b8:56:e2:7a:93:a4:c6:1f:66:3a:
ac:a2:86:9f:19:68:90:f4:b8:28:5b:e7:e5:8b:a7:fa:c3:13:
27:24:07:1b:f2:7a:69:1b:63:d2:88:b7:b4:21:eb:3a:e8:59:
28:b7:89:84:0f:38:d0:e2:c2:0a:43:a2:90:75:37:af:d2:4b:
08:2b:95:b5:d5:93:ab:91:47:86:5d:6a:39:60:2b:85:10:2e:
45:c5:fd:fe:41:9e:06:84:a6:5a:54:0b:b7:81:c8:b0:b9:c4:
02:18:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:25 2025 by rpki-client