Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: RCOtVUs62bluGjh+WE74LRHeoFbGF98PS35yM1dThog=
Subject key identifier: 22:15:C7:79:60:97:83:01:DC:8A:DB:C8:3E:21:4A:44:1B:C5:1D:CC
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0197B7EAE1A869614EBA35D9CD24C88106EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0EB1
Signing time: Sat 28 Jun 2025 19:01:52 +0000
Manifest this update: Sat 28 Jun 2025 19:01:52 +0000
Manifest next update: Sun 29 Jun 2025 19:01:52 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: mLbzvWv7LjqDh8KLbJTNmTt6j22nDAagkG444Hp/iio=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e1:a8:69:61:4e:ba:35:d9:cd:24:c8:81:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jun 28 19:01:52 2025 GMT
Not After : Jun 29 19:01:52 2025 GMT
Subject: CN=2215c77960978301dc8adbc83e214a441bc51dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:50:4a:dc:73:9f:1e:60:33:ef:fe:f4:9e:
27:64:d1:f6:48:31:e4:d8:c2:74:92:bc:2d:97:fb:
bd:aa:c6:23:b1:29:86:36:53:1c:78:42:6d:38:50:
16:1d:0b:db:fc:bd:0f:1f:0a:af:a5:5e:07:38:f2:
83:ee:bb:42:e0:db:9e:a9:ab:c3:97:bd:46:3c:55:
c7:c1:b0:ed:f4:04:af:67:3e:11:47:94:ba:82:8a:
86:de:f6:50:40:73:4d:b7:49:3b:79:f7:3c:a7:29:
5e:a6:ea:e6:4b:ad:a8:af:2a:cb:b6:69:bc:22:d8:
e9:e5:3d:2b:f7:43:73:9b:17:e7:dc:2e:af:d0:bc:
e9:b8:cf:c2:32:75:95:5a:c8:d3:02:2b:62:1f:8f:
88:6d:18:c7:49:98:04:8d:ab:f4:52:d1:0e:43:4e:
ac:c8:3b:23:ce:3f:c2:b7:4a:06:2c:ac:d8:70:54:
72:5a:32:f4:a8:3f:36:15:07:cd:2e:dc:03:51:0c:
d2:1a:80:c0:51:90:2d:19:83:57:4e:ee:e5:aa:1b:
75:1f:e8:77:ef:02:50:2f:d8:4c:65:91:7d:17:88:
f6:57:53:35:73:41:26:44:c9:f1:32:f1:e7:85:d6:
d4:fa:1f:37:91:9c:db:c2:50:36:18:0a:ec:91:54:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:C7:79:60:97:83:01:DC:8A:DB:C8:3E:21:4A:44:1B:C5:1D:CC
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c0:85:5a:e3:ab:aa:8f:65:a5:8e:78:c9:4f:33:a1:9e:00:
8a:e5:af:29:e1:35:96:27:5a:cd:0d:9c:6e:87:6e:1a:b2:c7:
86:0d:c6:80:45:a0:7f:05:b6:42:b6:c7:5f:b2:1c:0e:cd:38:
74:51:b5:8f:73:6b:1d:8a:4d:22:20:24:12:dc:3d:a9:d9:6e:
63:5f:dd:30:4b:7a:12:49:f5:d0:3a:db:53:cc:75:2a:80:49:
9a:74:4c:8f:0a:34:85:33:fc:f6:08:c6:01:f2:f2:83:00:f8:
41:ca:3d:be:ab:3f:ec:55:75:05:62:c2:a3:d4:76:55:fb:e9:
37:8d:f0:4f:a9:87:d2:f0:99:61:7c:da:b4:fc:83:9d:65:17:
7b:ca:06:18:cd:64:6c:38:4b:89:dd:f2:27:8a:35:6c:26:c0:
f4:0b:92:8c:e3:30:6b:ce:f6:f4:79:c6:83:41:e0:c8:14:fe:
62:aa:33:e8:a7:a1:b2:c9:38:00:dd:f9:77:35:4a:33:67:d2:
22:a8:11:4a:20:9b:22:40:3f:47:91:03:96:ce:f3:dc:31:37:
20:4c:04:b9:a0:d3:ce:da:79:eb:5c:99:5b:c7:f1:2a:30:77:
2f:40:c9:2b:99:44:1d:e3:b6:97:5c:a2:7a:0b:c5:32:34:ff:
60:3f:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:26 2025 by rpki-client