Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: Tn0Eo2pO7c09EkDZ6MRc8hlXpmfOONAVvXRAmAZr+30=
Subject key identifier: 6D:03:C6:48:3E:C7:20:A2:61:55:84:40:B7:63:D6:69:7E:B5:C4:42
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 0196C15D9A638787E0BDEDD4F8E83DEB639C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 1340
Signing time: Sun 11 May 2025 22:00:59 +0000
Manifest this update: Sun 11 May 2025 22:00:59 +0000
Manifest next update: Mon 12 May 2025 22:00:59 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: e6sRsniBZQ+hP+MjWAWLQfbKe79lGOCjx7AAIVvyZ5E=)
2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=)
3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:9a:63:87:87:e0:bd:ed:d4:f8:e8:3d:eb:63:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: May 11 22:00:59 2025 GMT
Not After : May 12 22:00:59 2025 GMT
Subject: CN=6d03c6483ec720a261558440b763d6697eb5c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:68:a0:2d:ec:d3:66:3a:c5:0d:42:ea:f7:
62:87:19:d0:e6:6c:a4:19:2e:23:73:88:3c:0e:28:
dc:00:11:b7:f7:6d:f1:27:94:ae:5a:6b:e8:14:d2:
3a:4c:c8:84:72:01:53:ed:a5:b7:3d:bc:4d:5f:5b:
02:e9:43:c8:64:3b:15:49:c2:ff:6b:0b:f8:fb:0d:
1a:18:c7:4a:69:c8:66:4f:82:33:44:49:43:62:40:
d3:30:84:da:d3:e9:55:62:74:c9:81:40:bc:49:30:
97:08:82:0e:fb:83:53:3a:7b:3b:a1:f5:b6:41:dd:
89:0e:5c:08:8a:9b:61:ac:49:97:43:ee:03:5d:b2:
c3:a7:2b:3d:f9:63:c1:23:bc:6d:37:b5:ce:8d:01:
85:22:45:06:2b:0b:19:e2:3b:5f:9f:e1:e7:5b:40:
1d:61:20:57:d8:0f:5f:91:c7:77:3f:60:23:94:e3:
04:fa:70:08:3b:9f:b7:04:8c:c8:19:e6:fc:b5:19:
91:93:41:38:96:65:f4:31:86:82:2b:d9:f6:7d:12:
c7:b8:f1:25:5c:67:6b:21:35:e3:94:95:50:9f:d5:
42:dc:76:4f:b2:b4:a7:66:6f:02:7d:b2:77:56:b4:
32:41:44:74:ec:ef:79:4a:ae:60:46:3f:9c:d8:f2:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:03:C6:48:3E:C7:20:A2:61:55:84:40:B7:63:D6:69:7E:B5:C4:42
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:6c:ca:7f:63:21:d8:d3:c3:47:e4:b1:11:1c:25:85:d2:
fd:54:81:80:6d:70:84:39:e2:50:65:fc:07:47:1d:2c:75:c0:
0e:d7:88:55:16:c2:6d:7a:a5:4c:9d:11:dd:64:09:08:df:0a:
13:08:f3:95:cf:5e:84:c3:43:a2:c7:9c:8a:20:e1:9c:a1:a1:
de:62:2e:62:61:d7:2e:a5:45:69:ac:bf:b7:aa:48:ca:ed:9f:
87:df:13:23:15:ce:1f:da:8c:94:48:1d:4e:49:11:d7:eb:5a:
dc:09:8b:7d:28:96:f5:b7:ac:2f:41:07:b0:88:18:0c:40:11:
f2:b5:6a:5a:93:28:bf:95:d9:82:64:44:85:09:e2:5d:d2:12:
fa:ff:bb:6d:24:1b:6b:db:0d:87:ec:85:d3:f9:e0:4e:4c:f5:
bd:c6:d1:2b:cc:a7:f0:7a:34:74:ad:20:a3:bf:d8:8b:7b:92:
c0:17:66:bf:08:0e:23:44:16:f0:e5:9e:df:de:8b:be:a7:6d:
d1:a0:eb:5f:7d:d2:20:c6:64:c0:9b:be:2c:d7:21:e7:8c:98:
fd:94:5f:56:e6:eb:7d:bb:51:9f:d9:9f:74:03:cb:b6:3f:7b:
08:43:b7:f0:1a:98:f9:57:f4:93:f4:9c:35:68:f2:3f:40:f9:
e4:fc:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:37:55 2025 by rpki-client