Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: 2jMIpr7hh9ZiQ4mZKvVtdr4wwIQLfmKTOjFbwwaxGc4=
Subject key identifier: A6:6F:D2:1F:D0:0F:9A:EC:B7:FD:03:9C:44:CE:0A:21:58:AF:4B:B1
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 0197C5A5FDB50839F14298DBCFB2F78B7D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1402
Signing time: Tue 01 Jul 2025 11:01:19 +0000
Manifest this update: Tue 01 Jul 2025 11:01:19 +0000
Manifest next update: Wed 02 Jul 2025 11:01:19 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: ov0hNILZNNtAeGEN5LGiWK2493HZToFdlyypil4Whf0=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:fd:b5:08:39:f1:42:98:db:cf:b2:f7:8b:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Jul 1 11:01:19 2025 GMT
Not After : Jul 2 11:01:19 2025 GMT
Subject: CN=a66fd21fd00f9aecb7fd039c44ce0a2158af4bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:0e:c7:62:cb:3b:b4:dc:6c:b9:81:a9:58:
af:15:86:ad:88:2f:e1:f8:f5:a4:11:f9:d6:5f:a3:
b6:e3:76:41:cb:5d:ca:42:59:a0:70:9d:72:60:c1:
38:29:76:fe:83:6a:6f:b6:5d:ae:61:61:a7:b1:9d:
f9:34:05:b7:62:f5:42:6d:9d:d5:07:8f:c2:f9:ef:
f8:57:1f:2d:5b:c5:e5:24:c4:5b:1e:85:a3:72:67:
66:25:62:d5:c7:74:c7:62:04:cb:39:12:50:97:35:
b7:ce:29:88:7d:20:6e:07:44:69:9b:da:20:5f:26:
14:7c:e6:bf:0c:70:48:14:ce:9a:13:34:88:cf:cd:
d1:65:90:68:fb:4f:43:2b:1b:ea:26:92:c3:25:07:
10:20:57:f1:e4:49:fd:6b:70:5e:98:cc:62:04:c7:
9f:20:aa:f4:ee:87:5c:04:24:b7:93:a7:1c:72:5a:
3d:8f:d0:e8:e4:44:45:8d:a3:3a:3f:8e:2b:7e:39:
93:8a:7a:33:0d:53:25:49:46:b2:53:3b:3a:af:28:
64:b0:b7:31:99:d9:cf:a7:20:22:df:7d:e5:3c:93:
21:b3:68:4d:43:31:2e:ac:6b:08:2f:77:4b:3f:07:
b7:b1:9c:d9:f4:45:8a:14:92:ae:7a:a0:8e:2b:a5:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:D2:1F:D0:0F:9A:EC:B7:FD:03:9C:44:CE:0A:21:58:AF:4B:B1
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:33:f7:b3:6a:23:9b:f2:e6:ce:b9:d9:2d:a0:2d:86:8b:14:
71:ad:86:14:e5:54:a0:95:5b:6f:45:37:6c:6f:79:5f:8b:0d:
6c:86:0c:2d:db:9e:94:0e:7b:df:21:7f:b7:58:91:fa:18:21:
2e:4b:8d:02:c9:95:0e:df:f6:f6:4e:2c:db:18:32:f5:f5:73:
53:d1:9d:e6:8c:3d:3e:ed:ff:90:78:82:56:fe:14:1e:4b:de:
d1:2d:c2:48:7e:0f:1d:c7:6c:11:5e:91:0c:f7:95:81:d7:5a:
ff:bc:9b:d4:f4:56:d7:6e:9e:8b:c4:9e:f9:8d:10:a7:73:12:
aa:be:35:a7:f2:66:da:fe:2f:7c:49:bb:84:52:64:6c:4a:45:
d9:52:ea:a1:1b:17:ea:e9:44:02:bf:79:b0:ea:3a:41:97:c9:
3e:5a:8d:c5:ff:d9:dc:49:58:3d:a0:97:c5:87:a7:ee:ec:32:
a3:6e:b7:49:d6:da:ad:9b:3a:ac:2a:9d:5f:38:c5:cc:f8:3a:
dc:60:cd:69:ac:a1:0c:3f:92:4f:3b:5e:31:8e:dc:e1:60:c2:
b4:d0:26:5a:f0:40:3b:f6:d4:5f:4f:34:1d:f7:c4:b3:ee:70:
71:d8:a6:2d:1d:ea:c2:21:3c:e0:7a:fd:9e:22:11:da:d5:62:
37:52:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:05:15 2025 by rpki-client