
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: xFgILIKGep4x/FkoJVo1PCYGBvU/DWfe9FwXriFO2wg=
Subject key identifier: DF:55:B5:F9:CE:FB:B1:23:92:9C:7E:B5:3A:33:DA:B6:4A:01:07:C9
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 0197B8FD25CE27A51B677178DC364DA4E4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 09AA
Signing time: Sun 29 Jun 2025 00:01:27 +0000
Manifest this update: Sun 29 Jun 2025 00:01:27 +0000
Manifest next update: Mon 30 Jun 2025 00:01:27 +0000
Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: gVEyLSIETP3P7MoI9OKWEn4H/FhxnHGOymDABBVuBaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:25:ce:27:a5:1b:67:71:78:dc:36:4d:a4:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jun 29 00:01:27 2025 GMT
Not After : Jun 30 00:01:27 2025 GMT
Subject: CN=df55b5f9cefbb123929c7eb53a33dab64a0107c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:d2:6e:94:c3:06:06:a9:99:07:30:83:4d:
26:4b:84:65:c7:42:e6:dc:b4:83:4a:0f:c8:13:08:
7b:bd:41:04:7b:43:bd:07:b6:ca:4b:41:5b:d5:bc:
fe:8a:63:3f:da:0c:5a:0c:91:86:20:6a:88:e8:87:
66:df:7d:c9:56:08:bb:9b:ab:c6:3e:00:34:6e:47:
5e:5d:df:15:ea:5c:b9:54:17:46:37:d2:87:a3:de:
1e:e4:b1:9a:80:4c:c6:96:f0:b3:54:ba:35:ba:5c:
61:94:c7:62:47:08:d9:77:73:cf:da:7f:b2:87:93:
8f:82:49:8d:59:b5:07:5c:c7:85:54:d3:53:f5:8c:
c7:5f:92:74:c8:d5:f1:c9:6a:34:3c:cd:75:2e:58:
0e:2d:67:04:7d:48:80:a3:a4:56:52:6a:a4:d3:b7:
37:a6:38:8b:75:d9:93:10:56:be:8e:5f:c1:7c:9f:
6e:5a:11:26:ed:d3:42:ae:81:66:fb:f5:95:c5:34:
71:e5:83:de:9f:69:00:bb:34:aa:6f:ee:03:cd:e1:
b5:fe:a1:71:44:a2:b6:be:18:c6:08:6f:ad:e1:14:
e9:d8:0d:72:0b:b9:18:aa:18:61:01:d1:75:12:b5:
20:15:a6:ce:e5:32:95:e0:28:8a:ae:31:75:a7:e6:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:B5:F9:CE:FB:B1:23:92:9C:7E:B5:3A:33:DA:B6:4A:01:07:C9
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:a7:a1:6f:67:39:92:5d:b9:00:41:72:7c:57:8a:84:e9:
28:b4:33:3f:1a:da:be:b7:a6:79:23:29:1c:fe:f9:69:40:18:
18:d9:e9:66:d5:3c:a6:ef:55:67:2f:43:df:58:b8:17:43:53:
7a:a0:2a:92:52:7b:3b:0e:25:02:58:ed:01:5a:57:cc:18:ec:
47:c7:4d:df:77:33:ce:42:6a:af:9a:e8:2a:d3:91:e7:ac:e5:
f5:5e:bc:52:81:d8:a4:91:12:be:ce:99:50:cd:48:0c:f9:80:
09:5b:23:c4:17:e0:88:ae:5a:7f:00:f4:a6:85:00:d9:4e:0c:
45:f6:31:68:69:db:52:7a:eb:28:51:b3:d6:00:45:2e:8b:36:
e9:9c:25:22:7e:8c:ef:d6:51:0b:d0:eb:e4:05:54:6c:85:78:
1e:a0:9f:a3:a4:1e:e0:36:a8:68:9d:cb:2d:38:47:81:e5:c6:
08:80:89:9e:a0:1e:d7:fd:29:55:fe:27:30:f5:df:d5:27:78:
cb:4d:82:e2:11:4b:ab:16:2c:82:c6:31:a2:ed:2c:1a:f2:c3:
7b:46:09:af:33:37:63:bb:9e:3c:47:b8:84:d5:5b:1e:b9:b9:
6a:fb:7c:8a:94:97:cb:7a:1f:d5:df:5d:08:ad:f0:3d:41:c0:
31:67:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:14 2025 by rpki-client