Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
File: kiluMEh7qUY-S2rcgat9pkfDn-c.mft (raw, json)
Hash identifier: cC/6OnHzTXUPc9rVmcgOvDkmqA+nD4aRxOPtHuRP++w=
Subject key identifier: 0C:4C:4E:87:0B:8C:F5:F5:55:0D:6B:7F:FC:43:29:B8:A9:C5:6F:A2
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial: 0197C0ED90F2918B0D329043CDD1DA490DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 13:01:23 +0000
Manifest this update: Mon 30 Jun 2025 13:01:23 +0000
Manifest next update: Tue 01 Jul 2025 13:01:23 +0000
Files and hashes: 1: i-OzQF2bcpPJxDcOX5kIL87LKyE.roa (hash: y62UPCmvVteCyYBr7OynuTmwVuaAEnPLTcqTccWvdJo=)
2: kiluMEh7qUY-S2rcgat9pkfDn-c.crl (hash: BUuNFaFyjiI+UrPSXOfuzVE3unpHj8Wz69xcjsmBIiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:90:f2:91:8b:0d:32:90:43:cd:d1:da:49:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Validity
Not Before: Jun 30 13:01:23 2025 GMT
Not After : Jul 1 13:01:23 2025 GMT
Subject: CN=0c4c4e870b8cf5f5550d6b7ffc4329b8a9c56fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:ee:4c:94:31:29:d2:8d:48:cf:d5:c7:31:
9e:9a:e3:ab:78:67:49:60:d2:4a:46:67:d1:f6:e5:
5d:c3:f3:c8:55:8d:8e:6f:bd:27:9d:d4:76:90:71:
c7:d5:e5:94:cf:40:2c:9a:19:1a:c1:dc:9e:0c:db:
e5:3e:6e:be:3f:b9:db:75:3d:9d:e9:a7:de:f9:e4:
ac:c0:9b:4c:32:b1:9e:1e:8d:b8:5f:00:e9:8e:da:
c0:ca:24:46:ef:0f:fd:0b:ca:0b:34:bd:1e:8a:f8:
fa:49:99:80:c4:3a:63:14:3f:f3:04:b7:35:ac:cc:
6d:ea:49:93:21:99:75:4a:45:2d:11:43:89:0b:ce:
72:7a:f5:2c:83:86:fb:8c:f5:4a:74:73:e6:52:2b:
c2:8c:59:56:8c:f0:77:59:55:19:b6:bd:e6:df:cf:
40:90:22:95:11:34:3c:8d:a1:6e:bd:55:fb:8d:92:
e7:24:57:e9:8e:dc:e9:7f:3e:0e:d6:67:17:e1:68:
ea:94:df:f1:ec:e2:53:48:63:a9:26:50:96:84:67:
60:e4:5d:40:b8:fe:df:22:a2:40:cc:89:05:8c:d9:
8a:cc:71:f1:76:0c:99:2f:90:f6:a0:f1:eb:04:42:
f9:a5:60:a6:5e:6c:f8:8e:4c:08:7f:01:56:37:6a:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4C:4E:87:0B:8C:F5:F5:55:0D:6B:7F:FC:43:29:B8:A9:C5:6F:A2
X509v3 Authority Key Identifier:
keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:b0:f2:65:fd:86:66:71:42:61:d1:44:41:cb:b8:f2:44:
b6:e1:72:5e:68:fa:9d:b4:2c:a0:c3:79:ce:35:99:12:c1:34:
f7:30:e4:33:ea:ef:a6:53:be:c4:71:3c:ef:0c:d0:98:26:79:
e4:13:1d:c6:59:6d:08:74:bd:d7:1d:0e:95:a4:1a:10:83:4b:
bf:be:70:b1:79:a4:0a:b6:a0:f0:ea:74:3d:84:a6:5b:33:e6:
cc:fa:27:d4:21:cf:bf:3e:d2:8b:df:14:0c:ca:e8:13:ab:33:
8a:91:63:c9:64:e7:41:38:a0:83:d1:5e:54:57:aa:95:6f:60:
ea:13:c3:d0:1b:9a:72:05:f5:50:e6:8b:d9:2c:f1:20:28:2b:
37:29:64:ea:ca:21:c8:ce:35:da:57:9c:c2:b3:4b:11:c5:64:
54:b4:09:e6:3d:40:c3:a7:2d:5b:2f:34:bd:69:a0:47:da:02:
1a:c4:b2:03:6e:b8:68:d7:b0:5c:d7:f1:37:4b:3b:fb:05:81:
4d:19:7c:74:c1:e2:6e:e9:70:db:ce:04:c7:8d:0c:98:99:16:
ea:bb:7d:50:0b:cd:b0:ff:f2:5a:eb:15:c9:7a:38:19:38:7a:
14:ea:08:35:64:47:42:1c:c4:79:80:c4:16:7b:02:05:af:1e:
2b:72:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:29:24 2025 by rpki-client