Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: OyJGDasAhPnRjnJGBcqIAVMsK4GIY/VaVTY6Ta2NUfM=
Subject key identifier: DD:0D:73:BE:D6:42:B9:C2:A7:13:CB:2D:39:65:DB:59:13:D3:16:5F
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 0197B7EAAD4C1CE87FEAC81617BCEBD1F203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: r1PlekD2gSR5dAEIy8eUVo5RqhkE01qFD+Djzuibx2g=)
2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ad:4c:1c:e8:7f:ea:c8:16:17:bc:eb:d1:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=dd0d73bed642b9c2a713cb2d3965db5913d3165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:c4:60:af:2e:1b:18:57:10:93:74:35:b9:
74:ee:82:8a:7e:3b:9a:da:46:3a:b2:67:b6:8d:2c:
c5:fc:12:03:4b:88:be:fa:f0:89:39:e2:7c:0f:df:
e7:39:af:23:bf:8a:7f:c6:3c:ec:71:c3:fc:5b:56:
2a:a1:9e:46:bc:ee:09:db:b3:5e:a0:72:b4:3b:8c:
e3:c7:10:22:fe:ef:4f:81:ad:96:49:e7:31:46:39:
d1:34:d4:5c:7a:9b:13:0b:1d:ce:31:aa:55:1d:74:
2e:cf:49:59:c8:29:48:d5:b7:27:39:8f:e5:07:26:
ba:5c:6c:e9:3d:8c:52:2a:b9:09:f3:3e:dd:f5:11:
36:65:cd:b6:b9:fa:22:83:7c:c6:00:98:a6:d7:0a:
aa:c7:4e:2f:35:fb:bd:82:0f:2b:85:c9:a5:b2:37:
4b:3e:b7:8a:25:6d:81:ae:d7:b7:bd:5b:b1:33:80:
82:3a:be:6f:a5:d7:87:cc:50:18:33:58:c9:8e:61:
e0:9d:77:5c:1c:44:77:91:17:2f:17:0a:0f:80:c1:
9c:c7:bf:ca:18:3e:f1:38:c8:97:6b:ca:50:2c:5f:
02:2a:3c:4e:68:1d:53:94:71:ee:1b:98:dc:29:d7:
88:b3:90:bf:65:e2:56:af:8e:35:55:d4:36:39:bf:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:73:BE:D6:42:B9:C2:A7:13:CB:2D:39:65:DB:59:13:D3:16:5F
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ab:80:f3:c3:87:a7:48:70:9f:6e:5e:88:a0:a0:24:6f:91:
d1:9a:a8:6b:6c:5b:11:fc:af:2e:06:2a:53:12:e4:77:5c:21:
5b:a4:e5:3d:a5:53:fb:32:47:67:c1:bb:42:11:4d:1d:70:c1:
2d:33:bb:72:1c:15:ec:f8:21:6a:8a:7c:89:28:6c:55:0a:10:
05:47:c8:13:f5:3b:5a:92:04:6c:bb:53:69:2f:0e:bb:6d:46:
02:66:f4:7d:0b:5f:4d:80:0c:38:51:c6:71:44:a8:a0:25:14:
a7:f3:18:9a:7a:b7:a7:17:ed:39:81:3c:f9:e4:59:70:3d:8d:
44:02:cd:7d:6d:7c:a0:47:aa:e0:a9:2d:f6:ee:e3:4c:67:7d:
5a:8e:76:36:e3:1c:a0:6a:07:f9:20:a5:f0:12:c0:f0:20:5d:
ea:f8:52:88:dc:8b:b6:b4:a7:10:e0:82:94:7c:31:7b:06:a5:
47:03:2c:be:96:b0:0e:5f:67:99:bf:e1:01:f1:68:23:cd:0e:
2d:c6:59:5d:0f:e0:ca:47:d6:25:6f:c3:1e:25:f0:e8:89:9b:
6f:00:ba:0c:fd:52:e1:71:42:61:2f:bf:6c:7c:0f:61:16:f9:
6c:07:ca:1a:51:6a:5e:d3:02:f1:e2:cb:24:e4:9c:74:25:3c:
9d:99:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:18 2025 by rpki-client