Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: S8QcLocJxMH+VCeGUl6K/wmi4+yoQUVDu1eg5kXC55o=
Subject key identifier: E2:C6:9C:0B:57:25:E2:39:BC:4A:7C:52:D6:5E:80:E6:69:9B:EA:BA
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 0197B6D7C06F4E929860C597369D70EB6244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0BBA
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: OGnPJzvqUy466R07MkEyaEIs53LNBKAImv64XaAUS+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:6f:4e:92:98:60:c5:97:36:9d:70:eb:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=e2c69c0b5725e239bc4a7c52d65e80e6699beaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:b6:95:3d:12:2e:11:af:21:e5:ba:b1:71:
ab:af:6e:4a:ce:6e:e7:63:b8:3d:95:b0:de:79:85:
26:c4:6b:f8:ef:5d:0f:80:57:31:c4:04:c5:59:2c:
34:de:48:2e:9b:c0:28:97:18:ba:ce:41:40:be:54:
cb:53:e7:25:a9:8a:7e:ae:fb:fa:ba:a5:ef:57:21:
69:51:71:47:fb:1d:f4:a6:57:36:ec:5d:5c:d1:5f:
63:ab:9d:a8:91:4f:4f:13:b0:e2:4d:4f:87:d1:03:
9d:f5:45:16:44:e5:ef:38:a0:c4:d3:c4:ef:59:34:
63:1e:08:4c:13:e1:da:6d:82:11:a6:b4:73:90:aa:
d4:25:18:76:54:5a:68:55:2a:48:54:9b:b4:e5:23:
fd:27:22:de:d1:56:4c:df:96:86:97:3d:e9:b0:17:
de:0c:45:3b:53:e9:07:35:ea:77:85:f0:b9:19:20:
1b:1d:e0:e0:db:70:a1:9e:0e:fe:b5:31:34:a5:90:
64:22:15:53:64:e6:27:cc:1b:e5:a3:3b:e0:b5:bb:
de:9b:fe:62:68:50:d7:4d:77:c9:dd:14:58:7b:89:
1a:c3:d3:ef:b8:57:86:dd:4a:7e:a9:a8:ef:4c:40:
3a:5e:23:0b:f4:2b:15:22:1d:ea:3f:a8:5d:6e:33:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:9C:0B:57:25:E2:39:BC:4A:7C:52:D6:5E:80:E6:69:9B:EA:BA
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:10:fb:ae:cc:51:8e:13:0b:f0:e2:b6:49:6d:5b:3c:45:95:
6c:4d:15:50:38:cd:e5:fc:cd:00:7b:b3:a5:8d:f2:ee:7f:1a:
f2:08:02:3b:09:8e:a0:13:0a:f8:d2:42:cb:22:af:5c:7e:c4:
e5:4e:77:63:32:ac:23:a9:85:24:40:e3:c3:b3:13:61:30:70:
32:10:58:97:47:f3:18:9f:1d:b5:a7:1a:f6:91:6a:f7:a9:d5:
63:e1:8c:a8:ee:71:26:9e:62:74:49:e3:9d:98:f3:75:9d:d2:
1f:1f:ac:bd:b7:43:84:d6:db:25:77:b9:f8:17:99:83:9e:3b:
9e:68:00:73:3e:28:98:e0:aa:ae:87:ae:cf:f2:77:04:46:c3:
4f:fb:8a:14:35:99:3a:c8:3c:d9:c8:39:14:c1:d4:37:5c:42:
15:d7:bc:5b:82:f4:99:eb:a6:9b:92:bd:6b:32:9d:00:1f:ef:
26:48:b3:87:46:6d:f6:93:69:73:81:a8:3a:45:cd:ee:9c:74:
b7:e0:e2:1e:f4:5d:4a:11:7a:54:5c:00:5f:49:9a:9d:d2:1b:
14:aa:16:56:4d:aa:d2:d6:8c:c8:61:3a:08:13:17:82:eb:05:
ba:62:e2:2a:67:62:05:42:de:bc:77:0a:33:be:42:6d:c0:24:
67:17:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:23 2025 by rpki-client