Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: C6GLIEkv4rf4qAhiXkvJEldDj32fd/W+pW9Owv0td/Y=
Subject key identifier: E6:77:CE:27:8A:5F:1C:D5:2C:27:D3:51:B9:8F:73:A9:5A:87:93:8A
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0197B6A18343B13208B1A4E0EF88CC974833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 04A9
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 74ajRA0heVganuKj5Q/5HffHhHd3qwwFWr0wlDBQR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:83:43:b1:32:08:b1:a4:e0:ef:88:cc:97:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=e677ce278a5f1cd52c27d351b98f73a95a87938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:ad:2e:d0:fa:c9:ff:ec:46:07:a4:73:7d:
e5:b0:ea:20:de:25:ca:45:f2:d8:d4:cb:8a:3b:74:
47:24:b8:be:8f:85:7a:1e:a7:d4:f2:d2:b5:da:77:
0a:2b:34:1c:04:e1:fc:2c:48:d4:36:ee:e2:26:d0:
b5:66:60:80:20:5b:31:a4:1e:75:d5:bc:96:fd:ff:
77:83:b1:ac:d6:a1:ce:21:67:58:85:64:30:6a:a6:
78:2e:49:74:ce:2f:27:8f:12:21:be:27:d3:cd:2e:
13:fe:40:ad:2c:32:db:d8:2e:d3:87:f3:e8:da:0c:
71:42:1e:01:03:4f:48:36:e9:20:15:88:ba:92:ab:
e7:d1:28:4b:d9:a4:1d:6c:59:07:0c:4b:9b:d6:83:
74:50:85:2c:bb:ea:39:12:65:77:e5:0d:9e:e0:97:
9f:81:2b:24:a3:56:70:69:c9:3e:2b:bf:ab:16:56:
a4:e9:a5:d5:a4:56:18:0a:26:3d:55:26:8a:bf:a2:
8f:01:43:e4:6a:dd:75:f8:85:0d:96:e4:67:90:96:
d6:89:7d:21:4d:6c:ae:62:70:e9:10:ce:a7:87:56:
94:1c:d0:b8:ad:f4:cb:fe:31:0d:a9:83:9e:b8:26:
54:18:77:b5:38:12:a0:dd:d7:9b:84:d6:f3:9a:7c:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:CE:27:8A:5F:1C:D5:2C:27:D3:51:B9:8F:73:A9:5A:87:93:8A
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:fa:9b:9e:ad:80:09:af:05:03:4c:27:b0:f4:25:04:24:
21:da:6b:e2:eb:f1:b8:ed:ab:1f:c7:e8:6f:b5:e8:3f:fa:7d:
cb:c6:9f:43:f7:d0:f9:18:aa:52:d0:4a:5f:bc:b1:98:12:8b:
4e:91:f6:68:db:73:b3:3f:d6:d4:e7:ce:7d:04:0f:f6:d2:7c:
2c:78:2e:25:29:a7:fb:b7:16:2d:a4:ba:c1:2f:f9:36:16:48:
6c:d6:b5:a4:ce:b3:72:11:32:84:6f:ba:9a:a8:63:1f:65:a1:
8c:07:86:96:6a:26:4a:59:ce:9e:21:37:16:93:c8:fc:4e:e2:
aa:26:99:10:02:1c:e6:4d:95:eb:58:4a:3e:f3:4c:ad:78:e6:
f1:cd:c9:21:97:e6:72:f5:00:38:8d:01:4c:39:c5:07:a1:36:
3d:93:d1:48:c9:68:1e:56:10:0f:b9:a0:f8:80:26:89:38:be:
12:03:0c:8d:25:61:99:18:08:39:3c:56:21:58:e7:fe:ee:7a:
04:60:31:3f:58:b3:63:bc:ff:bd:cd:85:82:01:e9:49:3d:c4:
7f:06:d9:00:13:61:ca:bd:3e:0e:ed:9a:92:3e:31:a6:bb:16:
63:2e:85:11:f5:9b:5b:99:a7:b8:80:76:21:0b:8c:3b:37:41:
6d:30:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client