Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: NM5sWlNWELk3ZwMxfT1YhF1yjYLQVv+jLAga7rvBC08=
Subject key identifier: E9:74:A6:4B:63:37:F9:60:4F:66:F3:DD:BD:9C:81:21:1A:B4:26:E3
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0197B7EABEC2ECCADC6FC5D6CAABD080B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 12BF
Signing time: Sat 28 Jun 2025 19:01:44 +0000
Manifest this update: Sat 28 Jun 2025 19:01:44 +0000
Manifest next update: Sun 29 Jun 2025 19:01:44 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: gO1AkjVJk+V+G6tzZOJUaIGLN807hiEKpHq2pz2hsHg=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:be:c2:ec:ca:dc:6f:c5:d6:ca:ab:d0:80:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jun 28 19:01:44 2025 GMT
Not After : Jun 29 19:01:44 2025 GMT
Subject: CN=e974a64b6337f9604f66f3ddbd9c81211ab426e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:17:03:b3:68:b0:c6:ec:62:98:ed:9d:71:
99:96:45:a8:8f:40:e4:7d:4f:0a:00:b9:5c:5c:2d:
f6:4b:5f:4f:75:31:bd:fc:0f:5a:d4:08:40:06:c2:
aa:15:ad:5b:44:17:23:f0:95:38:91:70:c6:49:3c:
6b:3e:09:c4:23:33:08:68:56:74:ea:89:f0:61:f3:
59:8a:bc:3f:93:04:f7:e0:f6:49:c5:0b:73:f1:53:
fd:16:af:22:53:a4:21:be:05:97:44:e2:07:65:42:
cd:81:fc:c9:4f:4f:20:16:1d:1f:2d:cf:c5:0d:d6:
7f:bb:11:fd:11:b4:4c:e2:d3:75:73:71:30:3a:d7:
1e:3e:c0:2d:18:da:35:7e:87:dd:33:b6:1c:76:de:
91:79:39:f0:5f:d2:91:e7:76:41:3b:dc:1d:2c:cf:
2e:42:e9:5d:59:c8:9e:b4:34:8e:17:1a:11:5b:36:
8a:bd:c2:6a:5e:fb:77:45:04:ca:6d:83:39:f9:0b:
b1:f1:97:f6:bd:85:a2:4f:7e:92:e9:36:3a:f9:72:
b7:99:a3:02:ec:8e:29:7b:fe:50:c1:1d:9d:eb:75:
97:e1:76:0d:52:cd:e3:62:51:1b:6a:62:07:cb:47:
3e:a3:89:e0:3d:d6:40:7f:53:2a:d8:bf:63:c3:e0:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:A6:4B:63:37:F9:60:4F:66:F3:DD:BD:9C:81:21:1A:B4:26:E3
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b2:75:78:51:92:1b:9f:9e:54:43:25:a7:63:a1:9e:5f:44:
ed:c9:19:2a:e7:d2:87:ba:1c:96:1f:a8:dc:c3:ac:1d:8b:7c:
e9:6b:52:6f:ae:c9:6a:7a:9f:0b:13:1f:d2:08:69:2a:b3:4f:
04:cb:33:fe:c5:56:fe:57:b0:7f:2f:35:a4:9f:ab:ed:5b:b3:
3f:a7:76:d9:f3:e5:9e:a8:0a:fd:5a:d7:9c:cc:8b:f7:49:28:
8a:db:ce:30:a5:0d:c8:d4:68:93:8f:5a:93:85:21:59:7f:d1:
31:7e:c0:06:35:68:c7:f8:bd:3b:cb:9a:d9:c2:f4:1a:38:db:
d9:bb:4c:33:dd:51:38:f8:33:d5:72:5b:70:35:5b:ce:a5:3a:
98:14:8b:b4:bb:bd:1a:20:5a:73:5b:72:e4:90:ea:33:54:90:
98:36:49:36:67:86:be:f2:8d:00:7d:18:a4:be:9a:06:5d:8c:
25:d1:7a:ac:65:74:f5:90:b5:dc:2e:a9:aa:00:4c:2b:38:be:
eb:02:b6:6c:16:23:18:c6:95:d4:d3:4f:6d:b6:c7:c8:83:b0:
b5:07:0e:59:6e:cf:b2:f9:07:75:d9:05:22:b8:2b:b9:db:d1:
6f:64:7f:8e:3f:2e:22:0a:29:d6:56:39:df:31:8d:79:90:c3:
3d:ad:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:47 2025 by rpki-client