Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: MmBkAwmCXxTb1OdrmxBUEY4UDRKdT38p2gVYQftnZv8=
Subject key identifier: 1E:6D:15:76:25:2D:E0:D3:F0:08:C3:71:7D:B9:B8:07:44:59:A2:05
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 0197B88FF8A481DBEFCEAF678D1E4A2AEAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0F12
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: 7q41DKcgtrO5al3oj79osxWHCxUbZBm4Qr26xJ9Q4R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f8:a4:81:db:ef:ce:af:67:8d:1e:4a:2a:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=1e6d1576252de0d3f008c3717db9b8074459a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:9a:c8:58:58:7c:e9:2e:ef:14:24:97:64:
d1:6b:42:eb:71:76:73:8d:7e:85:5d:c7:30:d4:c0:
9a:37:bc:85:1d:96:4b:66:a0:00:4d:ea:71:76:ac:
20:90:bf:d0:87:e9:16:1c:a6:32:8d:25:a6:43:95:
44:c1:cb:85:05:8f:3b:b6:2a:44:f2:d3:e3:d9:a2:
9f:96:e2:74:07:60:df:9d:bf:3d:87:69:82:63:17:
24:bd:9f:8c:12:0b:f0:d0:3b:89:16:53:ce:fb:87:
f6:c2:ff:42:d4:b4:6e:81:c1:7c:3f:c7:88:9a:9f:
88:19:f4:42:67:4e:02:55:d2:c2:87:96:4c:dc:92:
52:08:de:60:bd:64:69:17:d9:74:72:10:b5:3d:d1:
25:88:6e:7a:44:c1:f6:db:33:f6:5a:fe:2c:af:d0:
70:d1:88:2e:4b:20:7e:05:fb:05:d3:31:bd:71:a1:
78:b1:6c:c4:5c:68:7e:cf:a2:c2:28:f2:f0:c1:51:
d8:3b:02:1d:19:38:f2:25:55:e8:32:cd:6e:f1:b5:
ff:7a:60:ab:83:3e:35:6f:bd:0a:d4:89:03:3c:37:
72:7a:ac:d4:3d:a9:8e:14:f0:32:26:95:03:3a:4c:
1e:b6:5e:58:48:10:a1:43:cc:b2:4d:94:f5:a8:81:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:15:76:25:2D:E0:D3:F0:08:C3:71:7D:B9:B8:07:44:59:A2:05
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:29:af:c3:bc:0c:03:30:04:67:6b:ce:52:d3:93:87:13:
b0:72:ee:99:f3:4e:69:4e:33:1b:63:b4:85:77:05:cc:18:74:
6c:8f:0e:6d:43:15:51:a0:ff:1c:68:98:82:67:01:02:d6:74:
c8:74:89:22:71:e9:56:b5:0b:74:0f:a0:7a:f1:75:4c:93:ea:
e4:45:66:2d:93:be:43:6e:d5:0c:db:11:e2:60:83:87:51:4a:
5b:b7:c6:6f:8e:0b:02:ff:0d:08:b9:c1:34:a2:e8:b9:89:46:
45:20:20:c7:45:27:99:ec:ba:22:84:6f:21:2c:a7:95:f8:33:
68:f6:43:79:ec:32:4a:88:9a:72:18:cb:6d:20:89:4b:df:07:
9e:33:a9:a6:79:4f:a5:17:c4:99:1a:7c:04:52:21:e6:ce:52:
2f:72:98:fc:06:4d:84:92:db:a0:db:14:f3:74:fa:79:c1:6d:
92:75:9b:f9:ad:93:2a:c8:e5:8f:9b:82:7e:91:fd:fe:b0:6f:
d2:1e:e2:85:7a:fd:e4:f6:d5:76:19:60:3a:82:93:26:ca:72:
a2:b3:60:7b:13:cd:d6:f5:c6:81:9f:b4:7e:6e:f4:a6:7f:2f:
04:11:b8:33:43:a1:b2:35:62:ee:4e:c0:36:54:c4:89:8d:42:
12:12:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:29 2025 by rpki-client