Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: f+lEEjIIoRU4hYzVvi0GK+hy6CPvlSPK2vB3GW1UA58=
Subject key identifier: 69:D6:3B:0C:09:25:D1:53:17:F4:76:2B:B9:17:AD:2A:F9:9F:0B:9B
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0197CE3B9712DE39CE78404666A434E74800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 051C
Signing time: Thu 03 Jul 2025 03:01:41 +0000
Manifest this update: Thu 03 Jul 2025 03:01:41 +0000
Manifest next update: Fri 04 Jul 2025 03:01:41 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: cFaANLOKkn26Hj/Nlyiu4RpW55VZcRRzGdsF3iiWKcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:97:12:de:39:ce:78:40:46:66:a4:34:e7:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jul 3 03:01:41 2025 GMT
Not After : Jul 4 03:01:41 2025 GMT
Subject: CN=69d63b0c0925d15317f4762bb917ad2af99f0b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:4e:ae:47:7e:53:ff:9f:3c:a4:14:c5:f8:
b5:0b:75:ba:d4:6a:de:7b:65:3d:3b:ed:f2:b0:69:
63:e1:4e:60:fb:b6:3a:9c:11:d2:a2:7b:40:94:d0:
95:cc:6a:7d:9b:a4:1f:0f:83:54:8f:70:b8:ad:6c:
44:6a:60:45:a9:6b:47:4c:db:38:d0:43:64:6a:03:
b7:52:3d:2a:66:be:3a:b4:9e:f1:c1:d7:88:ba:43:
01:98:de:98:d4:7b:b0:c6:5a:42:c5:fa:f9:7b:ef:
74:e0:68:db:83:7d:36:7a:98:14:80:4d:a3:07:1e:
56:50:90:1c:34:51:fa:0e:b3:c2:f4:58:ac:83:53:
c2:14:b9:a6:68:3a:79:ca:80:f6:9a:60:df:23:5b:
dd:e7:2e:89:87:62:c9:dc:a3:a4:c0:a2:37:7d:e3:
06:e8:1d:a3:27:7c:a6:95:3a:a6:8b:1c:93:95:fd:
9a:9f:ec:c8:97:03:cc:97:1a:2e:d9:8f:c4:d4:1e:
ff:03:e5:16:e1:77:b7:e4:19:27:dc:9a:bf:03:98:
8b:90:c0:3e:ab:3d:06:6a:7c:76:31:70:04:a5:2d:
cb:fe:eb:3f:56:8a:32:b5:16:41:13:e2:e5:0d:9a:
c9:24:cd:3b:50:62:91:3f:42:7a:8e:d8:9c:d4:61:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:3B:0C:09:25:D1:53:17:F4:76:2B:B9:17:AD:2A:F9:9F:0B:9B
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:53:2b:4b:94:48:87:e1:24:6b:09:81:88:47:8c:c1:61:54:
95:41:49:14:a3:46:14:c7:2d:9a:58:cc:7b:8f:1c:b2:43:4c:
b2:80:99:d0:52:24:ad:5c:03:54:0f:c5:08:c5:7a:80:93:7d:
8a:61:65:dd:5b:cd:a8:c0:68:df:81:84:55:9f:c3:ba:8b:35:
c1:41:35:37:92:25:4b:82:50:2b:53:11:f0:b1:f6:31:9a:4d:
b1:87:f8:98:12:08:df:d3:07:34:51:74:26:35:12:e9:11:3d:
52:31:b6:e6:61:45:e8:31:16:f2:49:b7:f7:89:bb:15:0d:8f:
d6:75:c7:29:0a:13:29:bc:d6:68:48:67:2b:4f:54:40:df:63:
59:52:b3:f8:8d:9e:0a:c3:1e:97:8b:80:17:3f:56:96:2c:b9:
f9:2f:ad:09:c6:fa:9f:0a:f5:7d:13:f4:2d:b0:8e:01:f0:65:
9c:4d:62:e5:79:c5:d5:40:e9:d1:2d:c5:bd:c8:6c:e6:4c:97:
dc:4a:b1:c1:8d:f2:85:d0:3a:ad:5f:c2:aa:ee:60:f0:1d:62:
78:19:4e:02:d5:96:58:05:85:ab:60:30:7a:15:0e:fd:23:a7:
4e:27:ae:2c:c1:c0:9e:a1:8b:b2:f1:60:10:d4:e7:b8:a4:f6:
8a:3a:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:08:43 2025 by rpki-client