Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: cnk0bwedrJXfBlwZbwUL72C6G21C8UYUWqf7sD5pP0U=
Subject key identifier: 81:E6:50:DD:6E:D5:89:D1:26:DA:2E:36:2C:A4:69:99:99:41:A4:12
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0197B6A12575C5255C6FE784CF7E36436BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0D81
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: BNn7DVi5Ve+yj35XzQBiM4TSoVj3p4liqO91dWDIYKg=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:25:75:c5:25:5c:6f:e7:84:cf:7e:36:43:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=81e650dd6ed589d126da2e362ca469999941a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:cc:05:46:52:6f:df:f1:7a:b7:fc:fc:7c:
2c:97:9e:cd:6a:36:c3:7f:72:16:35:2d:38:15:fb:
d9:29:c0:f7:06:6f:3b:c0:8b:08:d6:97:d0:0c:c9:
1d:fe:75:26:73:75:65:fe:ea:8f:b8:cb:16:69:85:
ce:95:a1:fc:7e:7a:c7:23:5b:c3:ca:c5:1b:2e:de:
72:96:cb:39:00:91:f0:50:8b:2a:f2:4c:5d:67:51:
b9:a3:26:67:4c:7f:f6:e7:19:1f:d5:85:3a:d0:a1:
c6:4e:3d:6f:30:3f:7f:4f:af:05:a7:e7:4f:7b:59:
32:c9:b1:40:1b:64:99:b7:70:93:12:30:01:0c:4d:
8e:73:66:ec:34:09:fb:33:5d:9d:33:79:f0:3e:4e:
7e:6b:60:d0:68:31:6f:d6:a5:f9:99:34:f8:5d:2d:
10:b2:ec:ee:3a:25:73:a4:46:2f:a9:79:21:6f:3d:
10:99:68:b3:8c:37:fd:76:82:0f:c4:c6:46:9e:e8:
6a:35:71:dd:3a:19:97:2e:20:51:5a:c3:d1:26:d9:
b8:ca:05:16:d8:a5:fd:c7:0b:3f:ec:18:cd:73:3a:
3c:ea:8c:7e:1a:9d:bf:40:78:7d:f7:05:20:d1:29:
72:3d:03:aa:7a:6d:3a:07:48:24:59:75:01:4f:71:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:50:DD:6E:D5:89:D1:26:DA:2E:36:2C:A4:69:99:99:41:A4:12
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e9:f5:fe:3f:f2:9a:2e:e9:aa:bc:18:35:8f:ce:7e:b6:ee:
cb:73:db:fa:93:0a:41:6d:61:2a:b7:1a:9b:55:bf:1a:09:0a:
44:61:41:fd:c4:b8:79:f3:e9:59:4b:27:fd:4c:24:d8:13:b8:
45:cf:60:38:3f:e0:07:56:3a:dc:09:09:bd:0c:c3:fc:d5:25:
93:f5:12:e2:a3:05:26:83:af:10:23:64:60:85:31:da:8e:de:
f0:43:da:fe:aa:65:0a:42:23:38:06:48:f3:08:4c:c5:b4:46:
4c:1a:f1:41:9c:f5:09:64:19:c1:3b:07:cb:e9:dd:cc:ae:e5:
69:c1:fe:a3:d8:03:d0:16:0c:08:df:a1:9c:31:c5:02:9f:84:
6d:3a:17:90:82:de:76:c6:0a:91:ac:0c:92:21:94:ad:fc:c8:
8e:bd:e3:95:ff:8c:1c:21:21:d7:3a:c7:8b:df:63:53:57:58:
b1:37:c5:8a:9c:42:72:13:6a:5d:49:d0:08:fe:16:41:6e:23:
33:3e:04:c7:35:39:09:c1:31:bf:b7:ce:c8:44:c8:8d:b6:25:
41:ce:c6:60:ec:f0:4f:fa:34:ac:23:fa:77:8c:8e:39:f7:d6:
ce:c2:31:31:e3:b6:b0:b2:22:d1:16:84:7c:3c:f0:9c:48:3a:
bb:3a:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:48 2025 by rpki-client