Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: m13r8IXLkrjnLKIenICkuGDb6OYDj/VtNWjTlx823Ps=
Subject key identifier: E4:21:44:7E:66:5F:B0:7F:68:D7:6F:4B:39:82:D9:E9:89:FA:E6:F3
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0197C04941A90ED272CB32150EB1031DFD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1498
Signing time: Mon 30 Jun 2025 10:01:55 +0000
Manifest this update: Mon 30 Jun 2025 10:01:55 +0000
Manifest next update: Tue 01 Jul 2025 10:01:55 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: d1nNdo33/icZqyvcCM4LafKJKTd4wQb2pVqlF9Golgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:41:a9:0e:d2:72:cb:32:15:0e:b1:03:1d:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jun 30 10:01:55 2025 GMT
Not After : Jul 1 10:01:55 2025 GMT
Subject: CN=e421447e665fb07f68d76f4b3982d9e989fae6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:1b:4a:29:78:75:fc:dc:4a:92:b9:85:7a:
83:31:2a:df:0c:16:36:d6:aa:29:8c:83:19:de:66:
25:8c:cc:b5:93:86:d4:98:a0:98:7d:22:1d:2f:43:
9a:6f:f7:96:9a:bc:f7:19:48:e5:80:03:65:07:c5:
14:28:d9:f0:16:a8:35:0a:43:f2:da:1e:31:9b:06:
1c:4a:a6:41:23:37:72:77:b5:97:0c:5b:c6:e0:9b:
a2:6c:78:af:15:ee:0a:df:53:25:2b:83:9e:e5:28:
98:09:e8:0e:2b:86:f2:bb:9d:0c:0d:3c:6b:6d:73:
23:13:ef:02:ed:98:50:3e:fe:9d:7b:c9:f6:27:3a:
73:d4:6c:a5:ac:6b:4f:58:0b:a7:5f:10:a3:0e:51:
be:c7:58:cb:69:51:a2:4d:fd:ee:c3:7d:82:3e:9c:
1a:05:05:89:41:f2:a9:83:cd:70:ec:25:c4:13:9a:
05:73:51:4d:37:26:af:d6:86:24:84:66:54:70:2b:
c6:79:7f:34:6c:6f:4d:65:8b:e8:a8:3c:59:77:c0:
20:57:4b:84:84:0c:00:5f:3a:cd:82:f4:26:3f:d9:
93:fb:56:c8:2b:75:1c:c1:72:2c:33:57:1b:99:3e:
39:4c:5e:79:a5:92:2e:70:63:72:a7:19:55:e2:24:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:44:7E:66:5F:B0:7F:68:D7:6F:4B:39:82:D9:E9:89:FA:E6:F3
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:8f:df:a1:cb:12:6b:88:53:37:db:fe:3a:79:cb:58:1a:
e0:31:6a:b7:59:33:ff:94:14:78:67:a3:be:59:96:0b:e2:22:
c5:3e:9b:23:2c:28:1a:1f:71:c7:06:94:7e:c0:4b:4d:04:5c:
2b:6a:05:fe:69:4d:20:53:29:f0:5e:cb:bd:99:56:02:6e:79:
25:9f:8b:d3:36:c9:b4:f0:a0:2f:31:2f:b7:b2:33:1a:5f:f2:
8c:0d:8c:80:52:62:3b:ed:4b:04:71:1a:97:d4:9c:e6:e2:e3:
a5:f4:fb:85:39:4e:22:2e:e4:84:64:56:19:cd:72:45:0a:a0:
31:88:15:c3:db:83:2b:05:f8:53:a4:c0:28:60:29:79:12:19:
74:38:c9:4c:11:ed:70:e4:16:f6:20:e9:ea:f9:3c:f2:37:06:
4e:d2:2b:6a:d1:b1:15:3f:98:34:c2:0f:a8:05:bd:cd:b1:ee:
11:c2:30:f5:18:7a:7d:31:9b:29:c2:77:95:da:f0:a6:ca:45:
01:c7:1c:ca:bd:0e:30:5f:c8:1f:c0:31:a7:28:cb:da:a7:11:
5e:59:94:1c:d5:ce:4b:6c:74:6b:7d:2a:13:a3:b9:db:93:63:
80:a1:d8:78:ab:5b:d4:e9:03:63:6e:cb:56:07:d7:6b:99:12:
7b:59:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:05:23 2025 by rpki-client