Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: ww03UB3u8OBEDWFpXpNZLX5JTqCWepRrKtkSgzOIdZg=
Subject key identifier: 02:FC:12:4D:CD:C6:1A:4A:4B:21:79:9D:F9:0D:8A:37:8B:1C:D2:EE
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 0197B745965020BF3F4F669F99A6838A8F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 03D7
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: uBiy33B/rl03rc5M2iZOxd1Dj1a8IzOABzMZky8+QIw=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:96:50:20:bf:3f:4f:66:9f:99:a6:83:8a:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=02fc124dcdc61a4a4b21799df90d8a378b1cd2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:de:fe:2e:dd:c0:8c:f5:32:df:7f:28:22:
3b:85:05:70:a5:b9:89:02:1c:4c:04:07:9c:23:54:
5c:f7:a0:56:d5:fc:a3:ec:d6:aa:1a:c7:5b:0e:e6:
4f:b3:24:09:54:16:94:f4:b3:58:12:1c:b9:de:f7:
af:51:15:43:00:a6:93:c6:b9:1c:bf:a6:c4:44:ec:
72:ae:83:45:63:70:3e:98:7c:aa:fc:da:3e:85:d6:
87:30:0e:55:bd:a4:d9:64:c5:ee:95:f7:54:e4:26:
f6:90:9b:71:41:6b:f1:0f:db:23:f7:d3:f9:bf:89:
ba:b9:e7:24:32:2c:10:10:9d:f0:cd:de:4e:10:91:
70:f9:00:56:6e:5f:a2:ed:5e:cf:f6:3d:d1:48:67:
6d:23:30:12:bc:96:ec:e0:e1:14:1d:1d:22:d3:16:
b2:df:9e:1c:88:e3:36:4b:7f:4d:2f:10:b7:80:52:
45:ef:de:81:79:dd:b5:cf:de:41:23:4a:70:18:82:
98:56:ee:9d:c1:32:98:b2:5d:8f:8c:e0:3a:9a:54:
fc:93:a5:29:e5:79:f1:4a:d4:10:fe:47:3a:41:6c:
4b:97:0c:c4:3c:01:3d:d2:2f:0e:44:b9:d9:36:9d:
a8:9b:bc:fb:c1:35:a4:ee:50:1f:80:e1:6d:b2:b2:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:12:4D:CD:C6:1A:4A:4B:21:79:9D:F9:0D:8A:37:8B:1C:D2:EE
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:4e:f8:8f:51:c3:70:7e:6a:ad:d7:ac:56:09:2c:63:90:
7c:80:24:a7:75:f8:88:74:68:79:bf:6a:0e:43:11:32:5e:2e:
c8:e5:23:88:2f:77:a4:21:55:2a:65:78:12:62:d4:5a:73:2d:
0f:e0:d5:1a:22:76:e2:0e:51:79:01:0a:46:96:bc:07:f0:4f:
5f:0f:af:ff:4a:91:78:5f:aa:73:ee:97:e6:8d:0e:5e:cf:86:
61:2f:e1:dc:32:00:9c:bd:67:20:cf:64:02:45:b7:f9:8c:c0:
03:53:98:e7:93:96:e0:1d:3b:2b:dd:8e:5f:f9:2e:8b:5b:45:
bf:76:8a:1f:cd:f0:36:f3:06:70:c1:fe:47:92:39:77:e9:86:
69:7d:4b:ab:73:1a:e3:af:cb:14:52:f2:1b:36:66:ec:71:9c:
d0:9a:04:13:d7:2f:33:56:e2:86:1d:0a:53:0d:51:1d:38:f1:
c3:42:6f:dc:a7:9c:f4:ab:cc:7e:8b:a7:6c:60:65:e3:74:a0:
cb:ee:e8:21:99:42:83:83:62:b5:6f:19:ba:4c:a0:73:be:dd:
37:c7:46:0b:1e:21:18:21:66:ed:eb:39:c0:d0:fa:2b:16:53:
b1:47:85:ec:aa:c6:64:aa:bf:39:52:ad:41:84:b6:f9:ce:3f:
5e:29:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:57 2025 by rpki-client