Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: bwov8NWOr/jkdHf4vlgeCjFQZQ1HH894GZWn9RWGQpE=
Subject key identifier: 4B:A2:1E:71:D7:10:E7:D7:37:54:0A:0C:EE:47:80:0A:3F:BC:7C:BE
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 0197B6D7BBEE5E0AC51B2CFA0D107B5926F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: WS9DY/vd/3NJlnrnJ7zmGEtNKNCHaecUjTcg3UbrPEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bb:ee:5e:0a:c5:1b:2c:fa:0d:10:7b:59:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=4ba21e71d710e7d737540a0cee47800a3fbc7cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:34:6f:b4:6b:3a:a8:a6:c4:8c:cf:6f:a7:
1b:97:0e:e5:40:f2:c5:c3:b4:58:a6:60:11:e1:bc:
50:29:98:8d:f9:e8:a8:da:13:2e:6f:8a:5d:b5:b3:
13:b7:af:13:89:b2:5a:13:d4:cc:31:30:9f:ef:52:
5a:31:80:1c:14:3a:b0:31:57:d3:e5:78:83:1c:7d:
50:f5:48:57:6a:18:ba:f7:11:94:87:ae:b8:b9:94:
f2:d4:ab:22:cc:ea:0d:ed:02:e1:04:a7:1d:80:41:
77:88:74:02:50:e3:96:ba:21:ba:b6:bd:c7:10:12:
fc:a6:f8:f4:67:ec:04:f7:a8:5a:5b:de:fa:2b:17:
66:91:45:f3:a6:d9:ac:aa:fe:6d:16:5e:71:9e:f7:
91:41:15:4a:99:63:9c:18:64:23:dd:65:07:53:97:
e1:dc:c1:fe:0e:00:e0:83:02:25:d3:30:06:e5:af:
45:ab:63:54:60:6a:af:de:e7:2d:90:30:1c:b7:c9:
90:3a:12:a9:49:29:fd:f7:30:c9:37:4f:9c:23:5f:
3a:03:af:84:34:e4:52:0c:c0:ae:4a:25:39:ad:0e:
14:94:87:fd:fa:5d:5d:d6:fb:46:d7:ce:fd:3a:b1:
48:89:00:cf:dd:a6:85:80:23:45:17:c2:f8:f2:85:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:1E:71:D7:10:E7:D7:37:54:0A:0C:EE:47:80:0A:3F:BC:7C:BE
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b4:c2:69:15:52:a4:b9:ba:7e:33:83:ed:b4:15:87:2d:ef:
18:0d:f7:da:d3:64:50:cb:91:7f:be:40:b2:c4:de:81:91:68:
ff:6b:da:ae:2b:b7:56:4b:d6:16:c8:5b:a7:3d:3c:24:5e:f9:
ca:e9:b0:12:7a:2d:ea:61:60:4d:cf:c5:41:93:e1:b5:39:0f:
83:b1:a4:04:85:13:74:0e:ab:49:18:a1:0f:35:e1:fc:02:56:
e7:49:a2:7e:99:40:6d:33:69:ec:05:9d:e5:50:e0:17:c2:09:
6f:55:e3:fd:ed:42:77:64:0d:39:50:31:a0:e3:3c:57:45:42:
bb:27:4d:45:3b:71:e8:0f:9b:b6:57:db:27:5a:15:fb:0b:be:
35:1d:64:72:83:67:2e:14:a1:40:40:31:44:84:bf:ff:a7:1c:
f1:da:74:61:9b:fe:3b:b3:a7:08:a6:69:07:ea:b2:d8:17:64:
21:73:ab:48:0f:0b:4e:b5:12:1a:34:d1:44:8d:60:4c:ef:df:
e1:11:aa:8e:e9:c6:80:94:91:b5:3d:a1:23:8f:eb:8f:d7:03:
d4:08:fd:5f:62:a8:16:e8:d9:27:28:8c:50:97:ea:37:3a:d4:
08:1c:88:98:69:f9:b9:51:4b:b6:4c:cb:f6:64:9e:d2:14:30:
5d:4a:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:09 2025 by rpki-client