Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: q6Ky66m5u/lLrUg8fR9c6GRFsB7r1cOXydF+K6rBVcc=
Subject key identifier: 97:8C:2C:7F:BD:60:A2:54:FF:8C:6A:47:17:B4:47:29:0C:BF:AB:C2
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0197B70EDCBF2C0C1C30C6BBB5122E42A31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0961
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: v9AyztCY5sA25yiHpABLD6vz8gAsIwaiH/YtiJn6K9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dc:bf:2c:0c:1c:30:c6:bb:b5:12:2e:42:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=978c2c7fbd60a254ff8c6a4717b447290cbfabc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:f3:1c:46:3e:e8:cd:ee:35:61:12:d3:7d:
ae:10:ed:16:be:d1:46:8f:9e:35:c8:f8:b5:ec:ac:
bf:1e:f6:9a:a0:13:55:e0:f1:e3:1e:2a:a1:54:a1:
66:5b:b5:c1:16:f9:de:c6:16:32:84:26:54:c3:10:
fb:15:5b:ed:d6:8b:37:45:8a:62:36:da:e2:ab:b5:
1a:fd:bc:5c:83:39:4a:b9:60:af:7a:e4:4f:cb:65:
eb:da:c8:c3:48:1f:98:1b:ab:ea:9f:09:fb:f3:20:
b6:5b:3d:35:9b:cc:b4:fd:35:41:a4:4b:93:87:5b:
48:f9:d3:cc:29:4f:6e:58:3c:85:41:15:e4:a3:2f:
d9:69:95:e0:8c:5e:87:87:53:e9:fb:3c:33:78:6c:
4c:f4:bf:07:1f:1d:58:ce:5e:64:0f:a5:27:bd:02:
7d:0d:0b:52:4a:f1:71:a5:9e:2b:e3:8e:1b:68:ec:
c8:42:09:ca:bc:fd:11:95:4b:df:4a:bb:d2:4f:4c:
31:1d:a7:ba:e1:8c:a6:83:6a:0b:e5:95:a3:82:bc:
ef:5e:be:d6:bb:38:b3:9a:ab:7c:41:da:4e:df:48:
0c:c0:ff:6d:3f:2d:fc:b6:d5:d7:2f:31:fc:d4:94:
b1:f1:de:12:e4:b1:d4:86:0c:3c:55:8f:1c:45:48:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:2C:7F:BD:60:A2:54:FF:8C:6A:47:17:B4:47:29:0C:BF:AB:C2
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:b6:33:71:a3:96:b3:15:44:71:a6:b9:7d:54:b7:5a:1e:
f8:f2:59:dd:7b:a2:cb:8f:4c:10:6b:69:42:99:67:90:69:66:
6e:b6:77:90:51:a7:74:54:77:1e:09:42:51:a7:b8:89:2e:02:
f4:8b:84:fb:6e:88:9a:db:3b:94:fb:38:24:c0:73:e4:6c:a2:
cf:d7:83:2e:97:5b:6a:61:7e:c7:15:cd:70:dd:89:55:66:1b:
83:54:81:fe:93:6d:a3:8a:a3:2f:c1:bd:59:57:17:27:9b:a6:
fd:50:e3:69:e5:74:be:1c:05:7a:24:e0:48:8f:9d:ab:16:d0:
33:5f:e6:06:d9:da:d7:49:90:9a:40:2b:b5:89:c8:0b:96:50:
56:a7:b1:17:dc:f8:40:75:6e:f1:7b:b0:24:7b:9a:cf:53:d7:
17:11:7b:5d:50:7f:44:4a:30:21:08:e2:1a:fc:9f:c8:d6:67:
83:63:29:09:d9:1a:32:af:e2:36:48:bb:fe:7a:da:7a:50:6c:
a3:44:cf:d1:49:a8:ff:1f:f2:cb:21:31:87:09:81:fb:43:4c:
2a:99:82:ca:29:c6:a6:33:d5:85:99:85:b4:97:ec:24:ea:94:
0e:4b:97:b0:35:d8:9b:f2:86:07:67:f1:8a:4c:b4:1b:7f:ea:
82:61:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:16 2025 by rpki-client