Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: nEEij9s7MiRtpXDvKJ1d5F2c0HLNAVNH6z7oJ2T+Cqw=
Subject key identifier: F1:83:82:9B:99:F5:75:5D:77:17:13:09:EC:67:8B:96:CF:0A:C5:10
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0197B7B371F83A3CE8BE983D4D4E6E0A91F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: cTtBg432OIiU5SUltwKvPOdRY7x12hGI8uYjaiYp0As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:71:f8:3a:3c:e8:be:98:3d:4d:4e:6e:0a:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=f183829b99f5755d77171309ec678b96cf0ac510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:ce:b9:f0:73:e9:8a:7e:4a:cd:15:16:d5:
5a:96:62:49:a2:db:13:fa:fb:af:3c:1a:f1:3a:cb:
6d:eb:a2:96:45:e4:c5:df:8b:e8:db:95:99:e1:c6:
a4:88:f6:76:cc:53:b4:e2:ea:3f:bf:8b:8b:1e:c3:
84:38:c7:5c:6d:a9:50:dd:6a:a8:0d:20:c1:84:f9:
64:09:4d:05:6e:3b:37:20:60:53:2b:4e:e0:14:87:
42:62:2d:fc:58:d1:d9:85:2f:cf:54:e7:91:ca:7f:
b8:ac:64:38:fd:82:bd:31:f5:93:36:12:13:e6:a3:
63:26:bb:0e:f3:4c:7b:51:c1:db:01:d3:25:ff:a2:
d7:3d:11:b1:04:f9:7d:d1:f8:5a:5e:59:8d:77:2a:
6e:2e:fb:eb:87:31:df:dd:0e:41:c5:d6:7e:bc:54:
8e:b3:ac:0c:de:c1:61:05:3e:e2:89:68:f8:3e:d6:
f6:10:4c:67:7e:2b:32:ee:56:37:28:eb:4c:2a:39:
17:15:29:07:30:0f:9c:33:b2:6d:c7:4d:62:8b:f7:
aa:fe:16:57:59:73:ba:f8:a2:a3:7b:94:5f:de:59:
3e:58:00:ea:7e:25:c2:3c:60:4e:b2:d4:d0:0a:69:
0b:78:da:dc:c7:86:03:f0:f3:52:df:db:50:ef:23:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:82:9B:99:F5:75:5D:77:17:13:09:EC:67:8B:96:CF:0A:C5:10
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:ef:d8:69:a4:42:d7:9a:e4:71:41:ed:ba:ac:37:6a:62:
22:87:6b:63:60:82:32:c0:61:c6:c5:9a:09:75:29:5e:22:07:
e3:26:43:57:48:4e:9a:d7:11:82:30:09:ca:31:10:77:9d:a6:
7c:40:8b:f0:ec:46:86:67:9b:35:00:7a:5e:dc:e2:54:f5:c4:
b0:43:53:f5:03:dc:59:a9:44:7c:06:84:eb:0f:d5:df:00:42:
17:57:97:a2:ea:f9:e4:b4:95:9f:8e:9d:4d:04:ed:ba:53:2f:
6a:b5:6e:eb:40:3a:37:6b:c6:4a:37:65:d0:2d:8b:5e:93:09:
e2:1f:c5:8b:f5:4f:1a:c3:a4:4b:42:a7:d5:ab:af:fa:7c:91:
9b:04:cf:dd:91:5f:ae:e8:af:52:d4:72:18:07:b8:66:94:5a:
bd:86:98:90:2d:8f:2d:0c:a6:96:a4:3e:91:80:f1:23:92:bf:
44:c8:97:af:98:0f:50:83:ed:d0:6b:ca:05:c3:48:3d:a0:6e:
27:a3:d3:bc:42:dc:ee:e3:cb:67:e5:63:83:60:c8:ab:86:d1:
e1:03:ce:f2:4c:b8:87:c2:48:29:bf:ce:1b:30:75:22:83:82:
4b:f9:c0:cd:0b:d6:6b:f8:41:47:33:eb:0b:a7:72:04:93:ab:
88:72:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:00 2025 by rpki-client