Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: OP2I+l2ybJtWVqJG3gCrhydPakmXGTG/+IyFcbjYNfo=
Subject key identifier: 49:27:85:1A:39:51:75:B2:3C:44:6C:97:39:25:E1:AF:51:A3:15:3A
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0197B6D78CF097C39814B17F0AEF852AA819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: 6unAeArQ76dIl/yczv23KgNV07BGi+yFwIysrk4O5U4=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8c:f0:97:c3:98:14:b1:7f:0a:ef:85:2a:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=4927851a395175b23c446c973925e1af51a3153a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:d4:6d:71:54:8e:99:72:27:36:25:67:a5:
2e:0f:33:68:a3:eb:a3:bf:eb:4b:6d:d0:17:a1:f2:
fe:d3:11:1b:1c:2c:b4:34:d6:bb:54:04:5e:ce:16:
ae:9a:0a:b2:47:9f:62:9f:d8:cf:32:0f:0f:68:fa:
25:52:bb:80:f2:41:30:dd:40:6c:86:d9:f0:0d:d3:
a2:c1:4c:b9:da:c7:67:39:8c:d6:71:a2:48:d1:d2:
e1:ea:a6:02:55:2f:16:f8:2d:f9:3d:8b:e6:12:92:
4b:b0:a6:6b:54:92:c2:32:6a:c3:66:ce:8c:49:11:
07:35:62:f1:94:cb:6e:70:19:89:10:df:97:be:3d:
34:3a:20:aa:b8:04:a1:db:12:b8:48:ca:28:3c:7f:
93:c5:c8:ea:39:84:d5:ef:14:ac:ce:7c:7b:25:40:
49:65:ee:6b:12:be:03:43:c1:f5:62:fe:be:3f:a0:
2d:78:4f:b0:be:1d:a3:a4:7b:52:19:cc:ff:02:67:
04:c7:7f:87:e9:97:20:10:88:a8:9a:5d:13:86:4b:
6b:f6:d8:8a:76:c5:67:10:23:cb:df:d1:b7:a0:f1:
9b:d4:fe:db:43:80:50:35:4a:7f:ee:ce:0b:a1:de:
1a:b6:e5:54:e1:a1:43:cd:18:e2:f1:ec:60:0d:8b:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:85:1A:39:51:75:B2:3C:44:6C:97:39:25:E1:AF:51:A3:15:3A
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:0d:87:74:71:64:e8:41:5c:75:6e:46:f7:55:fc:de:55:
d9:41:67:b6:f1:4a:6a:79:7e:00:2b:c9:e0:03:18:81:ae:49:
76:ea:dc:6a:45:e6:de:6d:8f:34:ca:6c:a1:f9:c0:36:2c:8b:
87:5a:c0:78:46:c9:8f:4d:6f:b8:ff:9e:ff:62:01:4c:f3:bb:
8a:79:b7:54:81:3e:0e:42:17:7a:59:a2:56:03:1d:e1:91:b2:
fc:b7:c3:3f:b0:04:3c:fc:9e:b4:ac:74:e4:3b:02:32:f4:81:
6f:24:0b:9c:d6:ef:dd:64:21:b5:a5:62:d5:78:97:03:12:bb:
f0:8c:c4:e3:dc:9d:dd:d8:ba:e9:11:95:8f:e8:59:b1:85:70:
f2:d5:9b:e7:63:a2:4f:98:56:a9:da:4d:6e:58:e0:1a:f6:19:
ad:fd:e6:69:99:d3:d6:95:0b:61:be:f6:7f:17:6b:80:bc:de:
c9:40:a8:e9:6f:7d:40:dc:5d:6d:5a:c3:ed:d4:05:a1:4f:e7:
72:0a:03:96:df:ce:97:a2:f2:e0:6c:da:c7:88:03:52:19:34:
0d:fb:14:81:54:51:aa:4f:27:ec:63:ab:a0:2e:88:54:94:1d:
9a:cb:eb:70:ee:5f:66:ff:c3:9f:eb:a3:1f:64:f8:d1:4a:1b:
8d:72:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:20 2025 by rpki-client