Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: 9J54URIuGmwD6CLtR24LU5J/v+ErxLL7a5fKu6tura8=
Subject key identifier: FC:0E:91:15:3C:3D:74:01:2F:29:27:D9:90:58:66:BC:BA:2E:66:14
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0197B96AF7416EC2358C04C831ADB7EC1733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 02:01:24 +0000
Manifest this update: Sun 29 Jun 2025 02:01:24 +0000
Manifest next update: Mon 30 Jun 2025 02:01:24 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: ky/LvYezMTeKwDoldGjoPJjLiOL8h8m+aijvcSCocQY=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:f7:41:6e:c2:35:8c:04:c8:31:ad:b7:ec:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jun 29 02:01:24 2025 GMT
Not After : Jun 30 02:01:24 2025 GMT
Subject: CN=fc0e91153c3d74012f2927d9905866bcba2e6614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:20:20:a9:d5:4f:3c:65:14:71:0a:a5:9f:
25:e8:c0:f9:e5:91:27:1a:bc:03:5a:e2:2c:87:20:
e6:13:2d:ba:8c:dc:3f:9d:1a:6b:c3:7c:c7:67:3d:
c2:c6:04:a3:2e:31:12:ce:54:ce:94:aa:53:75:22:
a7:f2:d0:67:83:46:d6:62:dd:96:76:3b:23:f8:0e:
22:3f:15:8f:6d:a0:a8:f3:46:6a:fa:41:26:ef:1c:
ae:07:2f:b6:a0:df:ad:b3:e1:8d:49:c6:37:1e:b1:
b2:40:79:ba:8b:6e:de:07:94:0f:26:cc:fd:b3:9f:
71:81:e1:e9:3f:6b:ff:05:73:f2:3b:99:73:8c:8f:
11:32:80:0a:3b:f1:57:3e:a9:95:50:6f:1f:25:46:
d1:eb:cf:9e:c6:a6:e5:ee:33:a1:6f:0c:29:49:fb:
af:c4:3c:e2:0b:30:ef:14:99:96:e5:40:db:c5:13:
17:00:2e:8c:29:bc:ff:2c:d6:96:4e:fb:9b:a2:9e:
d9:29:d9:2c:92:39:90:c8:b8:3a:88:1c:a5:3b:11:
57:b4:e5:b3:65:5a:88:80:4d:2a:f9:8c:80:1e:64:
e0:4a:be:c7:47:4b:45:ca:08:3a:b3:ab:3d:0a:e4:
ca:50:d7:8c:9c:58:a7:be:6f:03:af:00:04:d3:d4:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:91:15:3C:3D:74:01:2F:29:27:D9:90:58:66:BC:BA:2E:66:14
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:ed:33:74:5f:23:82:47:79:01:9e:37:fc:50:da:69:be:
16:88:53:6a:63:82:56:62:a8:1d:ac:63:90:46:d9:6b:bf:2e:
d9:85:b6:14:f8:0e:90:9f:b1:04:5f:07:d9:3b:44:01:21:f4:
a4:2d:06:c7:d6:19:98:48:83:26:c8:42:47:f6:e8:19:0d:c3:
74:a0:57:fe:55:94:8f:52:ed:fd:c9:26:94:0b:4e:0f:d7:b7:
82:49:45:14:a3:3f:d8:9e:d2:3e:fd:f9:58:8e:35:21:2c:59:
54:a4:f6:d9:42:93:a2:54:66:46:66:07:01:76:73:7e:a4:37:
b8:ae:01:26:4c:62:97:6e:62:04:6c:11:1f:0c:ed:bb:35:d4:
14:5d:cd:f6:32:f7:0d:e7:a1:3f:04:7f:ad:62:44:1e:49:46:
c7:2c:3f:37:03:26:6f:b0:5e:63:21:72:9d:10:9c:fc:06:dd:
92:59:ce:47:86:37:7c:23:1c:11:37:0d:04:c6:42:7c:2d:3f:
99:cf:e8:47:94:e0:dd:3d:89:bf:98:26:6c:af:a0:cb:7f:51:
c0:f3:78:6d:79:f5:69:df:45:e0:9c:cc:ac:9a:ff:c8:2a:c8:
f1:0a:9f:6a:75:99:35:db:7e:22:2f:87:c6:16:1c:73:bb:17:
ed:7b:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:15 2025 by rpki-client