Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: u7k/aNndSnzG/xGmpk65ioT/nYm4nHWjqB2kVGiuC9Y=
Subject key identifier: DC:8E:19:3B:E2:2B:0E:B0:D9:41:3B:BB:83:38:AF:A8:E9:E2:09:6E
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0197B77CA2EB2AFE59C67F8E293844D65AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 01C3
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: DhqwbCSylH5eXwRSXOqwcamBdJ0Fm6OLdBVAXW5XLnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a2:eb:2a:fe:59:c6:7f:8e:29:38:44:d6:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=dc8e193be22b0eb0d9413bbb8338afa8e9e2096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2a:70:c8:3a:d7:ec:8d:ac:9f:dc:09:5e:13:
97:1b:b9:f8:35:5c:80:4e:ca:cb:8d:0d:fe:1a:ea:
88:46:f2:ac:9c:44:b3:39:8d:01:0a:75:fa:36:4c:
f0:86:c9:8f:a2:7c:3f:16:b3:88:7b:8e:54:57:49:
0a:92:68:09:e3:e5:68:4a:a2:76:97:16:66:bb:23:
0e:c7:72:ce:d7:fe:16:d0:e2:81:db:88:6a:f4:24:
d9:ae:d5:f8:c6:31:f0:6f:d7:dc:f8:03:5a:a9:f4:
90:dd:b9:1c:0c:3f:b2:39:33:1d:c0:cb:5f:8e:15:
32:7b:45:69:02:df:2b:46:33:92:11:77:2b:c3:63:
1f:87:34:64:4c:a7:ec:4a:04:4d:39:f8:c9:18:e6:
39:3b:b5:1b:45:cc:dc:af:b0:4a:56:e7:90:53:b7:
ff:81:45:6f:8c:c0:27:58:a8:79:12:b5:55:85:5e:
c3:09:3c:45:f2:c2:ac:c8:34:61:74:2f:8e:21:f5:
9a:7b:67:a8:45:36:df:44:58:b0:31:e0:a6:c3:db:
4e:75:08:f3:29:ab:9f:ba:2e:2b:91:e4:6a:5e:6d:
dd:0f:9b:60:c0:42:ad:44:08:cc:18:38:a7:63:0c:
6e:f2:7b:32:f3:44:9b:23:5e:ba:eb:a6:1b:bb:36:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:19:3B:E2:2B:0E:B0:D9:41:3B:BB:83:38:AF:A8:E9:E2:09:6E
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:65:ae:5a:20:b0:a9:2e:1a:4e:a6:31:44:03:15:d6:02:
dd:10:8d:1b:e7:74:e9:9a:02:88:35:e3:e2:c2:99:fc:b4:b3:
61:d4:f4:d5:63:1f:e1:7a:55:d0:87:96:52:fa:63:b0:c9:96:
27:3b:de:6c:f7:cd:d8:c1:67:6f:6c:16:f4:e7:5e:18:5e:53:
64:1d:c8:c6:68:ef:0f:c0:e6:05:83:cd:44:b9:2c:e2:6c:a0:
4a:f2:a3:be:39:2b:ce:fb:a9:db:e0:76:b8:e3:54:37:5a:d2:
96:3f:4a:63:90:5f:35:1e:c3:98:8d:c4:3f:46:44:56:c8:90:
b0:c4:2d:68:ba:72:27:b4:ee:a6:7c:bc:73:a1:3c:42:ce:d0:
5d:93:45:fd:90:6b:33:c2:03:dc:d4:6f:02:0c:28:5a:dc:a7:
4d:38:f3:f9:52:db:d7:1d:77:1f:00:1c:8b:88:93:b2:61:19:
c9:4a:cb:3c:f8:2a:65:00:e0:ac:27:6d:ac:89:c6:70:db:ca:
e1:58:1e:26:57:5a:3e:bb:13:20:4d:c6:3b:58:cd:30:e1:d2:
8a:38:91:df:d5:ff:69:bc:35:c6:de:a2:c7:11:e4:46:85:0d:
a2:60:21:e9:70:2f:a7:bc:f0:8f:c6:fe:6f:51:f5:3f:dc:02:
01:cd:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:08 2025 by rpki-client