Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 2nLixnFLYv7cLyDZGNhIq3NzjaKLkwv74yQSiVHySG8=
Subject key identifier: 2E:6A:07:EF:EB:9D:03:73:B6:57:EC:6D:DB:1C:48:22:74:9D:7F:86
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 0197B745A17FCC54B74669CEAAE1D2207BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: TlQmdLYq0W6v1zxVw4+69K/6BR3Luo45oU+IiYdNRaA=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a1:7f:cc:54:b7:46:69:ce:aa:e1:d2:20:7b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=2e6a07efeb9d0373b657ec6ddb1c4822749d7f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:5c:74:28:2e:30:55:f8:19:10:64:6e:63:
87:a9:61:23:1e:10:1f:95:fb:e7:51:77:cb:c8:f9:
95:c8:af:67:13:f0:ff:19:08:9e:76:1c:ed:e0:1d:
31:25:1c:83:38:2e:62:4d:33:f3:29:b5:09:b4:81:
39:65:d3:2f:eb:3a:a7:b4:4c:c2:64:38:74:2e:0d:
48:71:21:2a:a3:b3:97:c2:ed:52:9b:90:f5:5a:6e:
bb:4b:22:dc:74:c5:d9:05:ec:64:f1:e4:bd:fc:b4:
55:4b:5f:61:3f:e1:f3:53:9f:5e:99:5c:96:b8:e7:
38:c6:34:89:4d:55:3d:17:ed:7f:e2:5e:0d:c8:4d:
c6:20:16:3a:97:6f:f8:45:f5:d8:2f:64:20:de:8c:
03:0f:76:d3:ff:7b:db:97:77:cb:90:2a:1f:0e:75:
59:bf:6e:0c:ea:a1:4c:6f:6a:0a:61:74:5c:aa:b8:
11:41:69:26:6b:79:82:0c:17:c0:a4:a0:68:3c:14:
3d:95:71:76:00:f2:1b:e9:7e:38:a2:9f:d6:cc:35:
87:0f:62:7f:0e:6d:0a:ea:a3:d8:a5:86:e8:ba:8c:
8f:1a:1c:c9:bf:f1:cc:81:d9:1d:b4:2f:db:df:2d:
31:0c:f2:d2:5f:a7:dc:64:7a:e8:99:eb:18:76:18:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:07:EF:EB:9D:03:73:B6:57:EC:6D:DB:1C:48:22:74:9D:7F:86
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:f2:07:fa:b1:29:fe:f1:ff:e7:8a:10:59:06:0b:3d:12:
c8:b0:d6:68:28:f9:2f:9d:4f:7e:93:cf:a9:e2:d9:33:9a:c1:
cf:da:d5:80:b4:34:00:dc:3b:5d:14:e9:52:df:a3:d7:96:10:
79:e1:10:6a:f1:ba:69:0e:0b:2c:15:45:64:32:c7:0e:9b:0b:
65:da:85:a5:d9:4b:c2:12:3d:66:cd:dd:39:9d:6a:5b:d9:6a:
58:8d:bb:ef:f4:af:35:d5:ea:04:e2:2e:37:a0:3c:8a:cb:6c:
13:5c:b4:04:85:86:9a:e4:f8:72:be:75:15:24:e4:95:e7:b7:
91:e4:9b:1b:24:ba:15:d6:ad:b4:9b:1f:40:46:c0:9c:29:36:
74:cb:0f:13:a5:c5:c3:1b:8e:52:fc:97:99:d5:e6:71:c0:e4:
c0:b3:4f:0b:4f:de:bf:b0:0c:21:e0:27:b1:e0:de:78:11:1d:
68:09:ac:15:d9:7b:5f:e8:ce:8a:a3:c2:c9:3b:32:84:1e:6f:
ff:04:0a:ac:6b:50:31:b1:b2:45:62:4c:f1:db:2e:39:36:6b:
19:c6:8b:2d:3e:a8:05:86:a1:cc:d2:eb:8a:1b:1f:fe:3e:97:
8f:1a:c7:22:b4:3f:bc:a3:01:4a:63:90:12:f1:ea:cf:7e:b7:
23:da:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:09 2025 by rpki-client