Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: T0ZUDdA7HLikYKICJhZPI97MG6xYlertnF/Dn/FMmoY=
Subject key identifier: 6A:16:FD:B1:2A:4D:E7:43:69:BF:C3:50:C2:9E:40:EF:2B:E8:EE:9C
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 0197B70F233C227373E2FF083ADA3280A1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: vMtoUeiQWrKrZPSTcMFvBFuNyC4Ze9kVuyiPzE1W8SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:23:3c:22:73:73:e2:ff:08:3a:da:32:80:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=6a16fdb12a4de74369bfc350c29e40ef2be8ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:c3:f0:12:68:da:74:92:56:0f:7a:a8:88:
ba:ec:1d:16:77:5a:15:7c:c5:75:3a:7d:61:6e:65:
e6:19:82:b5:c5:8d:df:11:94:ce:04:af:b6:e1:99:
8d:9c:90:f8:78:8d:39:17:49:c9:8d:e5:45:6c:22:
bc:7a:d4:4e:75:f8:83:6b:aa:93:da:fd:49:6d:8b:
41:07:bb:3d:89:0b:64:e9:51:71:1c:64:36:31:2a:
e2:56:ad:e3:2b:4a:63:fd:da:01:75:b3:bc:bb:ed:
3e:93:a0:3c:21:27:8f:85:91:4f:a6:d4:c8:7c:ba:
e2:8d:40:a3:e4:43:ae:df:fe:08:b3:44:2d:61:15:
96:52:f5:5d:bf:7a:89:72:cd:e6:29:32:6f:81:7b:
68:ef:ab:7c:de:c6:b5:7f:01:cb:bf:92:c3:5e:59:
13:22:9f:93:81:28:73:58:10:90:0b:b6:5a:02:ad:
a3:5f:0e:e7:b5:b8:9a:8f:de:f5:8c:76:ed:12:30:
64:fd:b1:2a:27:a8:bb:28:be:bc:13:12:2d:2f:61:
50:f3:48:cf:18:08:8d:e1:c1:a6:90:70:10:27:44:
43:67:f7:b4:28:a3:be:1a:f6:c7:e0:22:14:16:ac:
c9:7c:3f:dc:81:88:56:0e:9a:46:c1:de:24:18:c8:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:FD:B1:2A:4D:E7:43:69:BF:C3:50:C2:9E:40:EF:2B:E8:EE:9C
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e6:79:01:1f:73:9e:fd:00:b8:9d:d8:79:43:1d:06:d1:01:
19:6a:f4:6a:b7:06:bc:dd:79:83:7b:44:13:c6:24:d0:1e:e6:
04:de:ef:b9:2f:d9:7a:ff:0b:03:2d:b0:fc:70:6a:c9:79:18:
ee:e2:e7:f1:cc:9d:79:75:c6:a5:8d:98:9f:54:d4:32:65:84:
ab:a0:5d:45:2e:06:4c:63:4e:01:c7:4a:d0:f3:8c:cd:94:17:
d0:07:ab:6e:38:f3:30:35:13:6a:49:e7:62:72:df:e0:dd:7f:
3f:75:c3:6a:b0:e4:f3:1e:4c:d9:a1:7a:7e:d8:a3:f5:33:52:
fe:bd:3b:9b:83:66:ca:b2:a3:ac:cc:fa:26:e8:82:1a:8a:15:
e6:b3:98:0c:bd:82:ef:ad:c5:1f:61:b2:bb:53:46:06:5a:dc:
15:86:b4:c0:29:7f:fb:21:cb:8e:94:30:83:2e:2a:50:89:39:
1d:16:a2:f7:9d:ce:50:6a:6c:76:a3:8a:8b:7c:02:11:10:c6:
fc:d9:9f:fa:fa:74:f2:bb:76:30:e3:f1:06:05:07:e8:ee:c3:
e3:4f:1f:20:60:14:82:8d:5c:c2:6d:87:9c:df:09:1f:7a:2c:
97:19:f2:59:22:39:f5:0e:97:7b:6d:a4:e7:53:67:87:62:a4:
ce:cb:cd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:49 2025 by rpki-client