Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: cMJI44aYvPAIACFx4aByvmTdahEn4+OPJ+7bXrSGXOE=
Subject key identifier: B6:B3:D0:BE:DE:F4:CA:A5:61:73:2E:C6:DF:29:53:00:8B:D6:04:24
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 0197B6A1427D54FDCAB0C77020385FFB3CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1424
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: P3AQZ+0fYIY6S1407EGj6vM/cCdDG4Ye0SUbcBr1e5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:42:7d:54:fd:ca:b0:c7:70:20:38:5f:fb:3c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=b6b3d0bedef4caa561732ec6df2953008bd60424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:bf:10:00:cb:51:4b:e3:f7:1a:4d:83:aa:
33:64:9d:57:3b:4a:63:68:6a:62:7c:6b:b5:ee:3f:
73:89:b5:33:4e:55:d1:0d:fa:8b:f5:1c:7f:9c:13:
2b:61:a9:93:8b:6f:93:1d:4c:83:ce:f9:e4:e8:7e:
1d:47:37:37:80:ed:17:95:7c:42:a8:72:53:ed:ba:
9b:89:64:fb:d3:0c:80:50:f7:8c:36:67:3f:0a:4e:
65:72:ba:3c:8a:80:91:50:5a:98:49:70:7b:a6:98:
9a:84:e3:94:5d:15:aa:3a:7a:db:0a:5d:68:ee:61:
98:6c:cf:05:1b:6a:0a:8b:31:fd:eb:03:cd:f5:ad:
07:bb:42:02:4e:7b:4a:82:c8:e1:33:f0:8a:3c:4f:
51:0d:db:c5:17:09:4c:ed:fc:62:81:53:9e:86:e7:
d1:30:41:6c:2b:06:83:98:e0:1b:86:fa:ac:c0:4a:
f3:e0:50:e9:5d:31:a7:ff:26:b4:90:c6:b4:fb:fe:
5b:16:d4:32:d7:5e:9a:38:52:84:bb:af:ef:61:48:
f5:40:77:58:d8:44:4c:e1:cf:c4:69:d7:57:08:27:
2f:74:24:56:33:ad:9f:c1:f4:13:0a:49:3d:fc:d1:
55:fe:e4:56:49:63:02:2d:01:33:44:c3:bf:c0:3e:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B3:D0:BE:DE:F4:CA:A5:61:73:2E:C6:DF:29:53:00:8B:D6:04:24
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:1c:0c:38:c5:ea:11:14:df:e2:b8:dd:68:f9:3c:37:a4:
29:ac:28:c5:f2:e1:de:26:d7:82:5f:5b:1e:5d:d7:d3:d0:67:
5f:f2:f4:e3:a3:1a:97:07:8a:fc:2d:86:07:ed:66:b8:f6:cb:
75:b2:8c:b9:ce:2f:82:5c:cb:e0:b0:e9:8d:0a:e0:8d:c3:52:
19:a3:d3:b5:d7:9a:e5:90:fc:9b:89:e7:dd:68:0d:4f:65:d0:
6a:06:c6:a0:48:35:8c:27:d5:69:00:d9:f2:93:37:9b:31:3f:
6c:8e:ba:44:64:08:d7:ac:97:01:67:9d:cb:62:e8:d9:a7:63:
e6:fb:c8:11:f6:e8:a8:5e:16:37:35:c4:6a:b6:ba:f9:bd:02:
bf:3d:bc:5b:b0:a7:ca:7b:e2:9f:34:08:9a:79:d7:3b:66:19:
fc:b0:b9:74:c5:76:50:9d:e1:2f:b7:cf:20:10:33:50:55:87:
52:d2:fb:94:d0:55:18:ed:23:0f:02:fd:5f:e3:07:2c:35:63:
3f:a5:c5:e9:9d:62:95:14:d9:dd:5b:2b:a8:7d:d0:f4:72:35:
b5:f0:70:23:1a:d6:13:24:3d:94:8c:75:90:d1:b9:26:de:df:
3c:66:92:2a:dd:db:f4:d8:3b:15:2d:a4:c1:ef:54:98:5f:d7:
01:02:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:34 2025 by rpki-client