Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: 1ynoy7yWIMzaDQ2QASrHcCoWkEh23Dm3Zx4fbVft8Cc=
Subject key identifier: D0:4E:E3:01:E5:D8:73:C0:FF:7C:6D:AA:A2:20:AB:D2:FF:43:51:9B
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 0197B96A763CFD9A5BB2B2EA021A56F2823E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0A5A
Signing time: Sun 29 Jun 2025 02:00:51 +0000
Manifest this update: Sun 29 Jun 2025 02:00:51 +0000
Manifest next update: Mon 30 Jun 2025 02:00:51 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: vsOm+ZUpKh4fvptOwirj8Dr6NePWW90Tea3sg8W23j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:76:3c:fd:9a:5b:b2:b2:ea:02:1a:56:f2:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jun 29 02:00:51 2025 GMT
Not After : Jun 30 02:00:51 2025 GMT
Subject: CN=d04ee301e5d873c0ff7c6daaa220abd2ff43519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:db:4e:c6:94:89:80:ff:10:c4:f4:24:21:
75:5e:5f:9c:f5:05:d3:09:39:aa:c1:bc:f8:bf:74:
63:01:cc:4f:94:7d:66:0e:b6:c0:c2:5c:9e:70:e3:
27:79:3d:d7:be:33:0c:e2:ca:52:6c:4c:b0:4b:93:
60:44:7d:4b:d5:99:68:db:19:6d:4b:6a:23:2f:e0:
d2:e3:9c:33:b6:b5:88:7f:98:90:f0:70:81:73:e9:
87:99:d5:a0:b8:89:b0:73:b3:8c:7f:9f:fa:4c:45:
3e:3f:1d:80:04:b4:d8:6b:f1:6a:2a:f2:35:4c:61:
52:6f:14:c9:bf:5b:56:29:2b:e9:36:bd:fb:29:09:
7a:76:5d:b7:9a:83:7d:64:71:a0:56:0f:84:dd:71:
77:00:61:36:b6:65:27:24:63:5b:89:4c:83:8f:fb:
2b:e9:34:7d:89:10:b3:a1:ab:4e:70:6d:42:ce:07:
b9:05:55:b9:a7:7c:cf:04:f1:50:b4:61:47:f0:c7:
08:2c:55:6f:42:59:1e:8f:56:4c:f6:01:6d:5a:63:
40:34:c2:9e:d0:3e:66:bd:e2:cf:29:a7:4a:9a:f0:
6d:47:d1:26:d2:c8:54:14:ed:d5:ba:88:67:dd:e9:
40:45:01:7f:2b:92:c3:2d:04:09:ae:54:91:12:63:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:E3:01:E5:D8:73:C0:FF:7C:6D:AA:A2:20:AB:D2:FF:43:51:9B
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:f0:a3:86:e2:76:cc:d4:a8:7b:d4:88:31:d8:4c:6d:bd:
72:29:3a:a0:17:d8:69:81:e3:59:d1:e1:cd:1a:18:06:fc:a3:
36:09:70:7f:b4:f3:d4:fa:b6:55:c0:ad:66:ab:b8:a3:70:ea:
df:0a:ce:8b:6a:45:67:9f:73:fb:b2:34:0a:79:2c:23:64:40:
03:8f:d7:3c:56:eb:27:2c:ca:45:71:00:71:c2:ff:78:83:87:
52:38:13:62:79:d8:2e:84:98:e9:a8:67:60:e2:7b:6b:c8:ac:
72:ad:da:0f:fb:9b:0a:b0:55:be:4c:fd:c5:62:1e:8e:7e:92:
0b:47:21:9d:01:46:17:13:24:17:ce:f3:9b:2e:99:86:72:d8:
ed:0c:08:3b:d5:79:54:df:8e:44:0e:8d:25:d9:ba:56:55:c2:
ef:6c:63:fd:32:7b:8a:e9:e4:67:25:1b:6a:b6:82:37:32:2e:
7d:3e:b0:40:6f:be:0a:a2:91:b1:2e:28:3b:8d:ba:27:9d:32:
8e:d4:78:f6:b6:c8:70:a0:ee:3c:ca:f3:4d:7f:15:86:1f:e5:
35:60:c5:b2:27:a2:41:b8:74:e1:6f:c9:57:95:9a:8f:84:2d:
06:de:c1:58:42:04:d4:0d:bc:48:df:37:12:e2:71:05:18:52:
21:a9:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:33 2025 by rpki-client