Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: QJz0bz/Vf+KnfLOd4DvJ8S7P43ZGzdKFZMfo8jvUqsI=
Subject key identifier: 11:5E:A4:92:AA:41:EA:49:CD:46:CF:4A:66:12:DD:1F:CE:E6:77:89
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0197B70EDBD453E6A804EFEBB67195897D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 101A
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: ka1lVZWI62fs9s2udizaxc461dYaMUuormz1CQPT43M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:d4:53:e6:a8:04:ef:eb:b6:71:95:89:7d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=115ea492aa41ea49cd46cf4a6612dd1fcee67789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:e2:6d:81:d4:c6:33:45:24:8c:56:ad:75:
96:c6:09:38:5f:0b:c7:b7:5e:4b:36:f7:49:14:12:
c7:d0:37:d0:e2:a4:6d:a6:27:81:49:a6:bf:65:b6:
dd:74:98:bc:00:9f:45:38:c5:33:ad:3d:5e:0c:c5:
06:53:04:f8:2b:1a:89:dd:41:68:3b:0e:9d:99:c2:
dd:66:91:ae:14:e8:47:e9:15:e7:9d:83:7f:a4:e7:
db:fc:24:e8:65:f2:87:c1:d6:d2:b6:d0:b9:93:5a:
8a:f1:18:44:53:78:01:04:41:d3:d6:95:f0:08:10:
b1:bf:fc:19:56:47:17:75:d2:05:5c:05:a9:07:6c:
83:69:a8:0b:98:25:a1:ab:c8:bb:28:f4:cf:41:03:
6f:99:13:9a:b1:ea:49:0b:3b:b2:dd:08:99:44:1a:
42:d4:46:f5:21:fd:89:d1:62:a1:38:ff:e2:ae:c4:
b0:1e:e5:9f:e7:69:cf:c2:d7:b0:90:6a:2e:84:85:
08:7f:b3:2e:bd:4f:3a:0d:15:c1:81:78:33:91:b1:
e5:d8:2c:d4:01:e2:5e:49:d1:cd:31:84:de:0f:57:
b6:d6:65:b2:7d:c6:3f:d3:bd:ab:f5:f0:99:44:2a:
c4:a7:70:ef:df:03:c4:61:a7:52:d4:1e:e8:9e:c3:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:A4:92:AA:41:EA:49:CD:46:CF:4A:66:12:DD:1F:CE:E6:77:89
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:2b:9e:f2:26:2c:5f:28:e0:ea:f2:6a:c5:60:df:e7:81:
91:b1:c4:47:51:1b:04:8a:6f:d0:e5:a5:e8:bd:97:b0:c2:ec:
20:d1:b8:33:e9:1d:da:30:6e:65:00:dd:9d:d3:46:bb:e0:07:
42:f3:60:42:d5:d8:52:ec:2c:56:9c:17:cd:da:ad:d1:4e:b6:
dc:d2:7a:ca:4a:99:db:db:6c:51:2d:cb:3d:da:20:ea:89:08:
82:f7:0a:81:75:33:79:35:10:73:26:f2:62:3b:75:9f:d3:e5:
c4:55:f8:d5:2e:4e:46:8d:3a:40:5a:12:69:92:b1:03:b0:db:
f1:1d:fe:69:2a:58:1a:53:28:4c:a6:d0:af:ad:00:3f:b7:b3:
b4:0d:eb:ae:75:2f:e6:4e:b5:9f:a9:c5:15:12:09:00:95:d7:
cf:b6:af:4d:93:48:bf:95:6b:f0:83:c2:ea:62:51:a0:47:c0:
21:cb:bc:32:64:e8:cb:03:a0:42:4f:6c:d2:20:23:fb:87:54:
5c:e4:28:16:65:ea:05:2d:f4:55:91:f1:a8:c0:48:84:db:a1:
18:33:4e:ad:0b:8b:00:3b:35:62:60:c7:26:3a:c3:55:8f:27:
71:56:25:b0:46:76:d2:93:78:01:57:dd:f8:d3:62:d5:3d:32:
9c:90:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:22 2025 by rpki-client