Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: RQMg3ptSx5BgD8iWZMyyvK0zagFKtSk+8gfwDQjpmgg=
Subject key identifier: 7D:5D:C5:C3:0B:C2:39:15:15:B8:D6:AE:9A:69:4C:EB:5C:E2:F5:8B
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0197C2A567EDAF1E182B6514ABAEF850EF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0416
Signing time: Mon 30 Jun 2025 21:01:49 +0000
Manifest this update: Mon 30 Jun 2025 21:01:49 +0000
Manifest next update: Tue 01 Jul 2025 21:01:49 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: Hy5jeXiNpKCMh6LTxbHG2KHFKLpLAGMhWi8S1p+T6Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:67:ed:af:1e:18:2b:65:14:ab:ae:f8:50:ef:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jun 30 21:01:49 2025 GMT
Not After : Jul 1 21:01:49 2025 GMT
Subject: CN=7d5dc5c30bc2391515b8d6ae9a694ceb5ce2f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:59:d9:c2:cb:d7:86:4f:3a:dd:08:6f:f5:
7f:7a:2c:dc:6a:28:98:a4:a9:48:6e:55:b7:ac:9e:
88:7e:69:7b:da:39:86:1e:65:9d:53:ee:05:2c:6a:
c3:3b:86:04:69:bf:e1:f4:1b:f6:8f:0a:86:c0:d1:
d0:d2:f2:b6:c4:14:c2:3f:a0:f8:a5:2d:38:28:74:
b1:55:0a:fe:40:52:90:1d:09:51:5a:29:24:1b:cd:
f7:cc:38:72:be:82:a2:9d:95:64:87:6d:c3:21:6a:
70:c3:e6:29:e7:ba:4e:7e:be:a8:74:cc:90:1e:d4:
57:43:67:0d:8d:b9:3a:7c:41:c5:26:6b:13:27:b7:
66:9e:ce:16:e7:a7:54:c1:7b:22:6d:b1:28:a5:1e:
e2:e8:de:b2:2a:ef:30:bd:d1:73:9f:58:71:2f:48:
cb:29:86:09:9b:f4:68:fe:12:db:89:78:f5:f2:6d:
1e:0f:5d:2c:20:29:8c:49:a3:01:04:08:37:51:8e:
bc:c5:f0:34:e2:9d:21:10:bc:29:9a:58:1e:ba:68:
d1:e6:ba:6f:22:17:5c:dc:47:66:9b:62:a2:7b:bf:
2e:ce:72:ae:ef:f0:a7:5c:a2:ae:77:85:cc:7d:d5:
a5:7a:61:d2:f8:49:72:66:2a:43:d9:9e:5e:bc:37:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:C5:C3:0B:C2:39:15:15:B8:D6:AE:9A:69:4C:EB:5C:E2:F5:8B
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:22:b9:09:67:76:57:dd:ee:eb:a6:04:13:a2:82:ab:62:
55:f1:ae:ce:f3:65:93:40:2b:e9:c9:bf:5a:69:90:11:b1:af:
d1:d6:5a:89:2d:e6:ff:69:a7:2b:8a:c4:b4:69:8f:2d:c5:93:
30:04:43:58:e5:e9:98:9e:ca:ef:02:c7:05:a1:9b:b2:bd:f3:
bc:7d:77:1c:fe:87:dc:62:0a:29:07:03:a8:a3:78:37:a1:71:
4f:5f:f7:10:77:d1:77:46:c8:6b:47:e2:a4:24:4c:55:a8:75:
1f:15:af:fe:7d:f8:a7:36:fd:17:9e:3a:c6:72:cf:59:31:29:
bb:8d:9a:78:82:d1:8b:4e:d5:f2:87:b6:bd:46:69:15:61:0e:
89:aa:83:ab:b8:6c:de:80:51:68:b7:91:84:e5:4e:9d:65:fe:
e9:16:be:8d:ce:73:7f:23:58:3b:3b:53:d9:84:1e:97:ae:7a:
89:d7:ee:86:78:16:38:ec:68:08:0c:b9:0b:5b:96:9f:95:68:
c0:0c:ce:7c:f1:eb:b1:d3:fd:c3:4b:b5:04:ce:ee:a5:ec:75:
41:63:7f:d6:9f:62:da:18:39:6f:85:1b:22:df:8c:61:de:ed:
e6:c8:7e:3a:bd:c8:14:df:15:d0:9e:8c:7b:f2:76:2d:9d:39:
8b:3f:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:44:40 2025 by rpki-client