Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
File: kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft (raw, json)
Hash identifier: gmgK0R/gzROIzbaRmIdSh2crITV7Phsxrw73+hjRQhM=
Subject key identifier: E4:F8:59:0E:A9:5A:58:59:54:E9:9E:E0:B8:1E:64:B4:57:06:65:17
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0197C9F20C01709938940FBB822F854CF14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 07:02:52 +0000
Manifest this update: Wed 02 Jul 2025 07:02:52 +0000
Manifest next update: Thu 03 Jul 2025 07:02:52 +0000
Files and hashes: 1: 81r7MDlREVnve0gPHpK-YMqPGos.roa (hash: LBj0CTTN9bH+FtAXQEk67Yy3EpjLyRKJ5E4kGwybQXs=)
2: kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl (hash: 2pfEBpARBPrQs5ob1hMdUeHpNeJzZFVYG+gkxSZGCb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f2:0c:01:70:99:38:94:0f:bb:82:2f:85:4c:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Jul 2 07:02:52 2025 GMT
Not After : Jul 3 07:02:52 2025 GMT
Subject: CN=e4f8590ea95a585954e99ee0b81e64b457066517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:91:32:9e:ac:89:4d:70:e0:3b:84:19:fb:
db:a6:dd:dc:82:c1:5d:d2:4d:91:3c:7d:ae:48:85:
ec:e0:5c:ee:73:6f:f8:82:7b:40:e9:ff:4a:0e:33:
f8:c8:93:79:f2:cf:09:e0:57:69:af:3b:8c:7c:e7:
d1:cb:f0:63:bf:23:66:ca:a6:57:6e:b2:bf:9a:95:
0a:b9:84:0a:7a:94:06:4a:e7:d2:47:5a:45:5c:c7:
ee:0d:94:e6:2a:59:d5:75:66:13:37:7b:1a:d2:b9:
78:8c:c4:d8:e1:73:ec:ce:44:bf:7e:bf:bc:96:77:
36:ea:80:75:88:41:9a:4b:d7:44:97:7a:bd:eb:e7:
91:f4:0b:b5:29:89:c2:34:59:23:36:aa:ee:a0:7f:
31:6c:74:db:41:94:c8:0a:8f:7f:04:81:a9:9c:d5:
93:74:f1:c0:d8:d1:47:ff:e1:1c:6b:13:9f:64:d5:
89:fa:1b:cd:d8:59:c5:2f:c5:ed:12:c6:e7:1e:90:
be:5f:cf:4e:69:1a:a8:53:62:05:11:e2:6f:80:54:
c5:28:02:cf:23:88:e0:9a:4a:65:17:a6:e9:c8:69:
44:fd:d5:e3:1e:b9:c1:e9:fa:07:20:de:31:fd:ac:
8c:a7:35:5c:8a:56:f0:a2:75:6b:61:25:b3:d7:cb:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:59:0E:A9:5A:58:59:54:E9:9E:E0:B8:1E:64:B4:57:06:65:17
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3f:f3:9c:9b:b5:28:aa:5d:aa:b0:1d:80:f5:6f:a5:b8:cc:
43:77:20:da:c4:37:af:12:6a:ad:db:60:69:d1:c4:59:2a:ae:
ff:b3:9f:f9:c9:ac:59:34:41:1a:e9:7d:5d:3c:41:df:31:95:
82:36:84:d1:7f:9e:59:2a:e0:f7:9a:22:84:61:fe:7a:60:24:
c0:06:0d:0c:71:55:c7:a7:06:b7:29:15:00:d4:bf:71:6e:9e:
6e:da:0c:3a:5c:26:fd:35:e2:aa:e6:5b:d6:eb:8e:be:ad:2b:
0b:9a:fb:62:7d:7b:77:27:03:f0:c1:1c:c9:96:4c:37:e1:f1:
ff:88:4b:84:99:ed:38:79:cc:83:2a:7a:37:e6:12:e6:6c:3c:
02:cc:44:b4:ee:48:2a:33:44:34:48:d2:7f:74:59:2f:6d:58:
9b:84:11:79:3e:3b:75:5f:aa:06:b4:ee:31:98:6e:f4:d3:8e:
f9:7d:37:74:d9:dc:e4:1d:4c:29:ee:b4:11:36:b5:da:01:62:
b4:36:c5:87:5d:96:e6:45:76:ef:f5:5a:f3:da:37:20:e2:b5:
7d:55:9a:cc:bb:f3:4c:2b:90:ad:41:54:d2:c1:87:06:26:0a:
1f:d2:64:66:67:cc:2a:6e:3e:d0:e2:81:e0:a5:29:f2:32:fc:
e4:6e:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:36:36 2025 by rpki-client