Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: Dn9LQ4k7NADlppVk1SqhDQBpYTNPWdTh2jNeVZtiIaI=
Subject key identifier: 65:D3:A9:19:FE:77:0D:AD:25:52:10:69:F0:0C:0C:C9:04:8A:23:9A
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 0197CACC05BB2E8C9BDAEC5FFAC314C6598A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 11:00:57 +0000
Manifest this update: Wed 02 Jul 2025 11:00:57 +0000
Manifest next update: Thu 03 Jul 2025 11:00:57 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: l9sw2VYli6AbkjAy13GLDLVUveAd6rofVRdMhQy7yMY=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:05:bb:2e:8c:9b:da:ec:5f:fa:c3:14:c6:59:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jul 2 11:00:57 2025 GMT
Not After : Jul 3 11:00:57 2025 GMT
Subject: CN=65d3a919fe770dad25521069f00c0cc9048a239a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:70:e2:bc:cd:e9:c4:f0:f1:b5:80:8d:53:
f3:c6:04:30:83:6a:98:c4:fd:9f:71:14:2e:e3:fe:
db:bc:9b:6d:bd:34:3b:1f:f4:1e:b1:5d:6b:88:7f:
8e:36:46:d8:bd:74:24:a8:01:be:61:21:c4:16:d7:
bd:75:68:73:ae:fb:05:33:f9:3a:1c:fd:36:93:b9:
f2:18:f8:49:e6:cd:34:cf:e5:66:d2:79:20:71:77:
8a:3a:f7:ca:0b:b6:3d:73:e7:cd:96:a9:87:b3:f6:
93:2d:de:69:21:8d:40:b6:f5:dc:03:d5:27:41:79:
d5:de:f0:0f:1f:c6:54:f9:5b:e3:ba:02:88:e7:d6:
cf:21:73:6c:82:9f:c1:80:86:d9:17:64:8f:73:97:
b3:d5:80:9b:05:49:1d:a1:18:be:28:a4:e2:9c:4b:
6d:47:99:b9:e9:8a:0a:c6:d6:3e:e7:f8:94:92:4e:
b5:9d:08:c6:db:4b:6f:27:94:fb:7d:68:2c:09:d4:
71:c1:e1:3f:e4:31:b1:40:f9:d0:f3:87:61:57:45:
22:15:a7:06:4e:65:7c:c3:cc:aa:38:87:ad:a5:0e:
8b:eb:8f:13:8f:35:1c:d6:d2:a9:03:9e:9d:a3:a3:
0c:f4:e0:65:87:4b:5c:38:1a:f9:ab:33:b9:0f:29:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:A9:19:FE:77:0D:AD:25:52:10:69:F0:0C:0C:C9:04:8A:23:9A
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5d:64:93:a7:19:eb:5d:d9:7c:ae:87:74:5f:ec:30:78:3f:
cc:e2:91:1c:3c:36:ee:5b:29:13:99:36:9d:8a:c1:30:31:ab:
91:76:88:9c:3f:79:47:6b:29:41:c5:ce:da:31:cf:1d:8e:28:
c5:f9:d4:0b:7a:e0:11:5e:32:31:fa:e2:2c:c5:ac:f0:b9:e7:
c6:3c:f5:09:0f:c9:4b:25:77:ec:ac:e1:76:ca:ae:3e:27:bb:
97:9b:36:7a:b5:d0:9d:46:0f:14:dd:8c:52:b0:11:ca:29:73:
b2:60:6c:4c:00:38:68:d2:3e:54:04:94:23:7e:1c:63:6d:b0:
63:bf:a6:d4:f9:88:47:ef:d7:cc:26:b0:d5:5b:8d:6d:fc:e5:
18:8f:ef:1f:23:30:90:4d:4f:db:70:8f:0f:c2:78:17:ae:1c:
03:ec:7a:38:82:3e:f4:7f:f6:99:c4:0e:72:17:79:3a:eb:48:
af:8c:39:af:60:f9:36:8d:fa:b9:0b:5f:07:c8:79:b7:55:6a:
65:ec:af:b8:12:9c:dd:50:99:d7:d1:e9:5c:99:5c:ea:00:47:
fa:89:d9:cf:8e:cd:27:46:25:1f:95:b3:31:21:dc:e9:3a:ab:
35:44:fb:a3:5a:16:60:b3:ad:b3:79:bb:b6:68:1d:33:b4:ac:
f5:12:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:47 2025 by rpki-client