Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: 4lLNi1xeWhl+k3/2nNvvvp9D2g0UWL2s6x3E1sIe9WM=
Subject key identifier: 4E:74:89:E4:07:B1:22:F1:0B:F0:BA:1B:9E:3C:94:8C:3B:3A:80:63
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 0197B6A177324B6AB1CDBCC0597F20416A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 1272
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: Ztoj7v6U1pwwIy1+Ohl9HVHv58DX6RHCnMHwOZuIMkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:77:32:4b:6a:b1:cd:bc:c0:59:7f:20:41:6a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=4e7489e407b122f10bf0ba1b9e3c948c3b3a8063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:46:ae:da:24:de:de:1c:ad:9a:b1:f6:75:
c6:aa:d5:a5:c8:35:53:9b:6d:70:c4:94:81:31:8c:
5c:38:28:61:e1:25:14:3d:89:ad:1a:08:f9:99:83:
f0:13:65:44:b5:07:5b:87:bf:92:79:69:15:06:e8:
e9:de:2d:5a:b9:6e:07:d3:4f:1a:98:e7:d1:f3:3d:
2b:69:12:77:61:63:f3:7d:72:60:a3:42:55:c8:b1:
67:df:48:13:70:e0:7d:73:af:13:af:17:73:df:62:
18:fb:ba:71:f2:4c:dc:4f:37:7a:be:a5:93:56:d0:
6b:e2:8c:8c:f8:9a:3e:11:e0:33:24:de:ef:58:6b:
1b:71:a6:05:3a:da:bc:77:ae:cc:81:70:3f:6a:e6:
30:61:50:c5:a7:d0:17:16:ae:80:f0:62:5c:51:6c:
c4:3e:ff:09:62:90:39:aa:81:ea:f6:92:12:01:93:
4c:83:09:75:71:5f:81:64:ec:b1:5f:f9:cb:4e:4e:
19:ed:3f:36:8e:a6:06:34:05:dc:9d:6d:48:d1:13:
63:7b:45:90:b0:1c:39:98:e7:85:dd:dc:73:3e:27:
77:87:e1:1b:ac:a6:a0:c7:1f:31:ee:e7:e0:0f:cf:
18:e3:d5:9d:53:ff:40:76:f9:49:82:8e:96:54:42:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:89:E4:07:B1:22:F1:0B:F0:BA:1B:9E:3C:94:8C:3B:3A:80:63
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1a:bd:21:7f:0d:3b:56:bf:96:b7:0d:2e:16:6c:48:c3:a9:
2d:27:8d:b4:a9:27:12:7f:63:8b:34:c1:63:95:8a:ef:89:b6:
30:5c:ea:f4:52:de:bb:28:d7:06:8a:f9:29:8e:32:98:9a:b7:
9b:8c:60:84:c4:ab:b9:f1:a7:c9:a6:50:35:c4:79:82:74:8d:
2f:4c:f5:4b:d6:d1:d5:2e:7e:63:eb:5e:50:d7:42:66:4a:90:
bf:67:6c:99:6b:64:56:61:85:54:01:9a:90:64:12:bf:d2:44:
71:62:5d:ea:68:82:55:51:64:e0:08:e9:34:a2:b1:f8:d8:b4:
17:6b:35:c8:06:d4:b7:f2:6f:1c:14:d3:98:09:94:cf:e1:77:
6c:07:47:09:c0:fe:1e:45:5e:c8:61:fc:26:92:3d:93:a8:cd:
f6:a8:74:bf:24:9e:b0:ad:81:d1:c7:e8:5f:cd:a7:00:21:6a:
17:97:03:a3:76:8e:00:3b:25:5b:ff:79:3e:45:d0:03:5d:2b:
ff:06:b7:80:72:61:9a:21:5c:ff:75:e2:90:96:44:92:20:b4:
b2:55:77:be:bf:fa:d5:bb:13:25:68:df:c2:3d:02:33:2e:b8:
bb:b5:0f:ce:1c:45:74:13:f7:cd:3e:c8:9f:1e:21:86:b4:60:
0a:94:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:08 2025 by rpki-client