Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: 4c2NAInFdojRsqXhpf0vHj8GpALcsUHqvQ+twmYFyuE=
Subject key identifier: 6A:86:67:19:CB:E4:2C:4A:26:B8:3A:46:8B:90:B2:8A:71:C4:90:2E
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0197B6A1A6A940B8768DA1E9ED5423BA9A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: VGMrftWzcrSJnmXmJSS+3v/cV/jtvU8HiCqgsgPUFIM=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:a9:40:b8:76:8d:a1:e9:ed:54:23:ba:9a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=6a866719cbe42c4a26b83a468b90b28a71c4902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:6e:21:44:4c:a0:41:dc:de:c6:c9:f2:77:
f9:31:dc:2a:0e:34:3d:a2:c3:c6:35:a3:ea:2c:be:
0d:78:23:61:d1:40:57:5e:96:83:5f:6a:bb:53:b1:
fb:45:14:48:43:a0:6c:31:0f:81:42:de:26:34:00:
14:73:09:05:7d:af:73:7c:e8:f8:45:07:fc:52:8d:
20:f5:ed:fd:07:f6:37:a1:85:47:d6:1c:a5:f9:53:
2a:01:95:50:53:5b:8b:0e:81:25:c4:a0:ed:d4:17:
04:d5:49:9d:65:a1:43:24:ea:ac:81:23:47:77:ab:
ff:4d:07:90:c5:34:c2:0a:e4:ed:9a:52:34:30:cc:
b1:2f:9d:a6:6e:14:fc:53:13:7b:82:8a:50:94:0b:
29:c0:4e:e7:e9:89:c8:4d:17:11:d2:8b:d9:4a:0a:
c1:99:4b:b6:17:33:83:39:c0:7f:4c:de:b4:ec:dc:
4d:9e:1c:92:2c:dd:82:5d:72:6f:f7:b9:1e:2e:ee:
14:d0:eb:ce:b3:83:4e:15:23:01:02:5c:65:9c:14:
a2:e2:4f:63:aa:09:7f:ad:1c:67:f5:7f:2d:d0:0a:
40:25:87:01:a7:23:b5:03:fc:d2:63:9b:da:73:2e:
89:73:27:14:88:fc:c5:4a:73:f5:8b:11:53:2a:22:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:67:19:CB:E4:2C:4A:26:B8:3A:46:8B:90:B2:8A:71:C4:90:2E
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:6f:52:0d:9a:e3:00:86:17:42:3d:20:4d:e7:a4:93:72:
de:f2:0f:08:ad:ac:8d:32:47:3b:56:a8:1f:44:42:73:8c:c2:
5c:51:06:d6:57:4e:58:6d:48:4e:b7:4f:7c:bd:ea:1c:96:c7:
29:d3:93:1e:19:a1:15:52:a3:6f:36:4a:f3:05:83:9f:ae:a6:
51:cb:dc:26:03:5e:da:ea:8c:33:d8:09:43:fc:1a:75:2d:e1:
05:74:a2:a5:5f:92:c1:26:54:fd:0d:2b:4f:f2:74:be:fb:1a:
ea:c9:ce:72:fd:92:0b:5e:7c:9e:82:5a:bb:2a:9e:c2:7a:73:
43:df:a9:1b:b8:53:0a:c5:03:e5:bd:77:2c:c5:1f:29:95:91:
d2:2f:a7:d5:df:96:57:ae:a7:4c:81:b3:58:2a:61:e2:66:05:
b6:60:01:55:8e:ac:29:14:17:0b:76:a7:20:93:a4:4a:74:fe:
66:fb:d7:64:f2:c6:e5:60:69:c9:b0:06:da:cc:5c:4e:09:67:
b4:33:a6:58:e8:52:b9:89:c8:ba:10:3a:fb:07:69:d3:77:78:
e8:c4:45:f5:68:ed:e8:1a:da:d2:8c:d3:91:b9:08:15:02:49:
45:7c:92:e0:b7:53:91:5c:20:80:cd:93:6b:16:ea:cb:64:0a:
28:3b:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:33 2025 by rpki-client