Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: CkIn/kKc0ydEtExRTecoD7Rioe4wKj5/pbzpMPXKTiw=
Subject key identifier: CA:AF:F4:4B:60:6C:08:AB:49:ED:A8:25:58:04:29:A7:D9:E0:E8:76
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 0197CCF141482B53A5D993A21286CAD76115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 21:00:52 +0000
Manifest this update: Wed 02 Jul 2025 21:00:52 +0000
Manifest next update: Thu 03 Jul 2025 21:00:52 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: 9L14Vtp2ShqxWlC1Kq4SjY4SZXKEX5F4CmAaDpz9VPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:41:48:2b:53:a5:d9:93:a2:12:86:ca:d7:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jul 2 21:00:52 2025 GMT
Not After : Jul 3 21:00:52 2025 GMT
Subject: CN=caaff44b606c08ab49eda825580429a7d9e0e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:81:72:d3:ee:b7:af:fd:f1:b5:5c:26:97:
51:51:80:cb:ac:93:c5:e4:53:eb:ac:6d:7e:30:ba:
43:12:1a:b3:54:9f:44:46:28:7a:a3:ea:68:dc:ba:
df:e2:2b:02:6a:8d:d7:96:c5:ef:89:6e:e4:70:b8:
ba:87:9a:3f:7b:41:23:2d:78:f8:e4:0a:34:05:22:
0d:20:41:f5:d4:9d:3f:b8:aa:2f:a9:95:54:80:2e:
a2:c3:24:ce:93:39:bb:b9:c9:43:88:c6:47:9b:53:
c7:f3:8e:0d:a1:d4:c7:e4:1f:28:d9:73:1a:bc:12:
f6:1b:d4:c0:ff:b4:0d:16:d1:66:5f:cb:9d:43:7f:
b9:9e:fd:29:2c:ef:47:56:2c:d2:06:eb:c3:fe:22:
3d:a9:89:d9:35:61:75:af:c5:d1:95:e2:c2:d3:8f:
af:a7:2a:81:ec:d3:7a:13:6a:2a:7d:85:b8:dc:ba:
7a:de:e2:a6:6f:66:2b:14:90:61:5d:0e:9c:78:97:
51:d2:89:78:b7:a7:89:b9:39:84:19:7b:9e:2b:09:
9d:af:ec:88:18:43:b3:cd:68:6e:8c:82:81:3f:94:
4d:f2:05:b5:04:10:e7:dd:a8:b5:77:7f:b2:bb:89:
f3:c5:fc:1e:6b:ee:25:7f:88:bc:1e:f9:50:96:b9:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:F4:4B:60:6C:08:AB:49:ED:A8:25:58:04:29:A7:D9:E0:E8:76
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:dc:bf:12:23:e2:6a:b8:ee:81:59:c4:5c:46:31:5b:e1:
e2:b5:03:ce:02:fc:a4:58:a9:b2:d8:47:c3:a8:8b:f5:88:01:
01:42:d9:11:c4:ed:97:59:6d:bb:9a:26:d0:d1:2c:ed:49:d6:
60:b6:17:2d:dc:2e:01:fb:83:8d:bc:d3:25:86:f3:12:56:c5:
4b:ec:f9:72:e0:b8:b4:c5:85:a6:65:c5:17:b2:97:4e:14:10:
e1:10:3a:73:22:29:b5:83:00:e2:e7:c6:d8:df:31:7c:43:c7:
4e:bb:ea:56:93:19:0a:b8:1d:05:21:b4:87:61:92:d7:27:a7:
76:e9:e9:5c:8e:45:2d:9b:21:a4:70:b5:ed:1a:54:c1:f5:03:
bc:4a:3e:54:fb:c9:bc:9b:bd:75:44:43:88:54:ea:78:a7:23:
03:93:29:a9:1e:c4:86:d1:55:ab:fd:c2:d1:5b:63:99:c4:46:
ec:6c:7d:9a:17:0a:e9:a3:c5:e2:df:e2:91:f6:a6:b5:9c:c4:
73:e5:41:7d:04:df:47:68:b3:fe:47:04:19:61:26:49:12:0e:
37:a1:b0:07:c6:9f:54:d3:e1:84:a0:be:15:79:a5:66:0b:43:
64:39:7d:c2:62:97:6c:1d:ea:dd:74:a3:29:49:cf:03:0c:0c:
bb:e5:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:37 2025 by rpki-client