Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: sCPOXDp+DsJCgCR4mTT1kHYZRKWFkkedseOtWeM8GJs=
Subject key identifier: B8:CA:4F:49:18:DD:63:B0:FD:6D:1E:81:88:06:C5:04:60:12:40:EB
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 0197C493BC7AF04EFFA8C4EB7DC93F7F3A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 0959
Signing time: Tue 01 Jul 2025 06:01:45 +0000
Manifest this update: Tue 01 Jul 2025 06:01:45 +0000
Manifest next update: Wed 02 Jul 2025 06:01:45 +0000
Files and hashes: 1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: R2hTOTLFkxQMbqJGk5dR9nm3Vf3lRMfI5vegwfzCsh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:bc:7a:f0:4e:ff:a8:c4:eb:7d:c9:3f:7f:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jul 1 06:01:45 2025 GMT
Not After : Jul 2 06:01:45 2025 GMT
Subject: CN=b8ca4f4918dd63b0fd6d1e818806c504601240eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:e5:d1:87:41:bd:b0:40:8b:dc:86:0a:34:
52:4d:25:2e:ab:67:fb:85:3c:4d:a9:6a:88:3a:f5:
67:d7:0b:15:1a:e9:7a:14:43:8d:c3:b8:68:b6:3a:
fe:8d:dc:80:57:5b:91:ec:82:a3:de:2f:7d:7b:d2:
4b:0e:98:94:1d:80:a4:c0:8d:02:6c:e0:80:a2:64:
14:fd:91:20:12:b3:0d:ed:b8:0c:16:e4:38:ff:76:
01:33:90:0f:39:19:c2:46:dc:53:d1:0c:cc:da:05:
3d:66:d6:59:19:b0:2c:94:94:3f:4f:fa:d1:97:df:
e0:f4:66:9f:0d:06:86:58:f0:8d:de:89:2d:5e:6a:
ae:31:ef:22:4e:43:93:ed:c5:76:43:57:37:31:29:
c5:b8:98:cd:30:0b:3a:ff:33:ac:38:32:17:11:10:
4f:0c:1c:17:9f:c0:b4:30:b4:f5:e5:ad:9f:61:15:
f4:c8:52:87:a6:ad:84:47:5c:95:9a:76:01:69:4f:
6b:f4:0f:fd:8d:2f:6e:ea:88:b9:5e:46:c4:4b:56:
3d:22:43:08:67:64:d2:f9:c8:1c:51:26:1e:0f:dd:
9f:56:60:fa:2f:83:ab:13:78:1e:a6:05:86:3f:66:
3d:34:60:e2:c5:32:5a:ed:12:20:8c:18:47:d4:58:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:4F:49:18:DD:63:B0:FD:6D:1E:81:88:06:C5:04:60:12:40:EB
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:91:da:de:18:e8:f2:d7:bc:45:01:57:3d:98:7e:d5:9d:
11:ae:10:85:14:91:02:ff:24:78:b5:7e:f9:fa:bb:5c:85:b9:
87:f6:e8:9b:2a:02:fe:43:ce:13:9c:a9:f4:5b:93:12:38:98:
f4:17:dd:d7:92:ca:3f:85:d4:6b:e7:4a:18:53:87:b2:4d:c8:
c8:18:b5:be:8b:fe:3f:ba:ad:b3:6f:7f:58:5a:af:22:1a:ed:
24:7f:ab:cc:39:08:f3:52:e5:a7:c7:02:f4:51:97:9b:17:3f:
f3:eb:cd:4e:5f:ac:83:b0:87:82:04:41:1a:f5:fe:df:6c:b0:
0f:33:6f:73:a6:63:ba:9f:5f:91:54:78:cf:bd:e2:83:73:48:
81:ea:de:ef:da:f8:46:3e:20:60:4e:4f:5e:89:29:a3:d2:07:
77:75:0c:79:9f:78:76:cf:9b:36:34:c0:7c:fd:25:4a:fe:b2:
48:4e:6c:c3:df:a1:fe:d9:79:51:63:93:8a:67:7b:74:8c:fc:
fd:b1:ef:c1:e7:a3:dc:69:ca:f7:64:f2:af:1d:32:35:db:ca:
78:07:37:08:39:6a:e9:05:d8:04:08:75:ab:ae:7e:c4:ad:c6:
56:84:f3:aa:e3:0a:bb:96:5f:c1:72:a1:25:22:83:b1:78:bf:
e2:79:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:49:00 2025 by rpki-client