Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: d+nUN60eq4nsFTv3690L+NTGCF7UxfQmxIhEXVBZF44=
Subject key identifier: 9C:60:0C:1C:0D:D1:AD:26:A5:AB:4F:F4:29:6C:EF:4E:8E:22:81:DF
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0197BA0F3F874F4DE5C59BBE83AAF2B02227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 05A9
Signing time: Sun 29 Jun 2025 05:00:50 +0000
Manifest this update: Sun 29 Jun 2025 05:00:50 +0000
Manifest next update: Mon 30 Jun 2025 05:00:50 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: A9+5U/QBz+XFY2cf3kG2PCKMIyaFMKCEaQDJwRRP9tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:3f:87:4f:4d:e5:c5:9b:be:83:aa:f2:b0:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Jun 29 05:00:50 2025 GMT
Not After : Jun 30 05:00:50 2025 GMT
Subject: CN=9c600c1c0dd1ad26a5ab4ff4296cef4e8e2281df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:70:46:26:4a:91:80:8f:6d:9d:13:31:95:
3e:11:15:ed:0b:6a:60:ba:9a:c0:c4:6a:01:70:d7:
73:de:bb:7a:d3:2a:86:70:c6:5a:11:f3:c7:bc:b2:
2b:e8:c1:29:74:99:dc:33:0c:fc:76:2b:d3:e5:83:
7f:43:c3:23:a3:14:11:c0:3f:ca:c9:35:dc:bd:e2:
1d:3c:69:b1:1e:7d:f6:23:44:74:49:ec:d1:57:6c:
8a:86:e0:aa:d5:a4:72:f1:cd:a3:0b:66:88:80:c5:
7d:6b:0d:7a:b2:72:30:dc:c2:09:b7:0f:80:4c:e1:
96:28:0c:4b:30:50:00:d7:e4:c2:b9:19:eb:4a:50:
43:61:8c:1d:82:39:87:30:9f:3d:fa:1e:8f:44:f5:
3c:4b:64:1f:a8:ac:39:6b:d8:7f:41:8b:16:91:3f:
f1:83:2a:7f:b3:e9:6e:d1:97:c8:ad:00:b8:57:57:
79:01:4d:1f:f7:a9:44:57:3f:4f:00:6b:6f:cd:b8:
9a:09:d1:4b:c6:fe:00:38:9d:b3:2f:ad:5b:6f:2f:
02:9f:59:19:80:90:e4:e0:23:10:5f:5c:2b:fe:88:
c0:b8:bc:b4:23:84:1f:98:74:34:e5:76:90:47:48:
9f:e4:5b:27:f0:b3:a0:51:5a:ad:32:e4:fa:51:b7:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:0C:1C:0D:D1:AD:26:A5:AB:4F:F4:29:6C:EF:4E:8E:22:81:DF
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:99:92:fa:bd:29:53:09:68:ef:6d:89:fb:c3:8b:d5:c9:
7f:30:db:a2:bc:ad:8f:87:65:ca:37:80:df:1d:94:c1:74:93:
76:f2:da:45:da:17:6e:02:67:78:7b:fb:2d:89:cb:64:c9:e5:
28:29:e8:34:35:68:06:ef:f0:62:fa:97:d8:89:3a:4d:34:a7:
71:60:df:1e:56:dd:da:a0:b2:b1:de:a7:3d:5b:5c:34:c6:68:
a3:0d:fa:cf:f2:99:92:b1:ee:6b:2d:d9:a9:e0:3e:1e:04:d0:
51:82:94:66:74:fe:7f:36:08:ef:22:a9:3a:30:b4:02:ce:bf:
29:9d:6d:3e:45:fb:a1:25:2f:c5:8c:21:fe:c4:0d:e4:f6:90:
5b:3f:0c:80:32:79:cb:a2:62:20:50:b6:b2:af:ab:d7:a1:a9:
e9:23:21:75:a8:aa:f8:45:26:bb:0e:d5:b6:f6:d1:8f:dd:f3:
f6:3f:5f:57:b1:24:d3:bd:48:9e:7c:29:60:55:e1:9a:71:04:
72:9f:1a:11:4a:bd:3f:aa:6e:12:42:b1:8c:b8:30:1a:15:6f:
ba:8a:85:95:49:22:29:11:14:32:8a:c0:ab:da:ed:c5:c4:3b:
6b:91:06:1a:46:83:eb:b9:fb:37:d9:8e:6b:f6:3d:b6:7a:6f:
74:e4:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:40 2025 by rpki-client