Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: R7MDKCGqmnpoz7Mq1Tw8wSOVi4uESUZty43Vs5muecA=
Subject key identifier: 27:E2:F8:E8:E9:80:D1:1B:87:51:58:F5:61:09:B0:26:44:A7:6C:9A
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0197CD5F2BC577C7FAA0D3655F88FC59F90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 23:00:55 +0000
Manifest this update: Wed 02 Jul 2025 23:00:55 +0000
Manifest next update: Thu 03 Jul 2025 23:00:55 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: ZYzlMOCmyCACLUztXgxqo4CJWB8RCp6ZHvB+2hNSbtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:2b:c5:77:c7:fa:a0:d3:65:5f:88:fc:59:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Jul 2 23:00:55 2025 GMT
Not After : Jul 3 23:00:55 2025 GMT
Subject: CN=27e2f8e8e980d11b875158f56109b02644a76c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:a9:6c:0a:49:94:61:33:8c:10:40:4f:a1:
2e:1e:55:54:a3:e8:02:2f:86:ba:92:db:05:a8:32:
cf:7a:de:50:6c:fe:dd:c9:00:32:17:d0:3d:19:54:
93:8f:70:9e:dc:26:c9:e5:5d:19:9a:63:71:11:9d:
a9:a4:d3:9f:94:94:5c:d6:8a:46:da:5e:52:10:f5:
5c:7b:7a:b7:65:8c:c2:76:b1:1a:4e:d6:d3:bc:4c:
2a:44:8e:82:8f:01:ce:cd:eb:5b:cc:41:5e:a5:e5:
af:b0:4d:8f:c5:df:00:ef:3e:e9:ce:82:90:e8:f5:
c0:9d:5b:05:8c:a1:ca:ee:fb:ea:36:b0:d1:b0:e4:
fa:59:b9:62:80:40:65:4c:d8:83:97:64:99:2f:9e:
b6:f8:1d:3b:c6:c6:38:73:1b:1f:90:76:b2:a6:12:
d7:0c:6a:b1:ce:45:5d:d4:a0:a0:73:73:96:45:93:
6a:c2:f5:a9:93:ac:3e:e2:db:8a:a6:5c:4e:af:b0:
1e:1b:30:88:83:36:ba:7e:c5:0f:ac:ba:1f:35:16:
d6:89:17:36:ee:73:15:b4:d9:8d:f1:6a:e7:b3:60:
e0:cd:d1:10:b6:94:40:3c:5c:07:3c:bc:d6:e7:3b:
5b:11:13:ad:8e:ea:1d:1b:47:7c:75:98:7e:68:cd:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:F8:E8:E9:80:D1:1B:87:51:58:F5:61:09:B0:26:44:A7:6C:9A
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:50:be:01:61:ba:28:c5:7c:54:1e:de:56:f1:fa:df:3d:f4:
9e:89:a2:e1:23:92:db:eb:78:1a:2f:9b:59:68:31:b5:36:2b:
63:e6:36:ae:e8:b5:70:92:12:9b:49:9c:78:30:98:48:dc:65:
bc:27:d7:03:46:60:10:a3:d4:5d:9f:7a:d0:4c:54:fe:b4:f0:
47:75:5d:d7:49:98:ad:bf:18:86:da:25:c1:7a:6d:32:ba:d8:
58:d7:38:21:cb:79:f5:44:3f:c3:41:ad:b5:68:95:87:32:fc:
30:c4:3b:bd:a8:f6:f0:26:2b:f6:0f:26:b4:98:fd:71:00:6a:
27:8e:f4:51:54:ff:36:44:29:98:fc:c5:60:36:a6:f5:1c:6e:
56:3a:bf:33:d0:7a:14:5d:38:1a:d7:de:ce:9d:cf:5c:2e:b8:
fc:4e:6e:49:7d:3c:5d:36:16:98:03:d8:e0:21:53:44:a6:db:
6a:07:82:38:41:aa:7a:5d:6e:a7:5b:27:0f:66:1b:ca:b8:61:
f5:2e:15:15:e5:56:3d:f2:30:c6:a5:da:b9:c8:09:ce:7b:0b:
4d:cb:e4:09:07:0b:b8:ae:59:97:a5:91:36:94:81:94:50:68:
e1:c2:d4:a7:ac:13:6a:97:d7:31:be:19:5d:ae:95:06:52:90:
5c:5b:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:04 2025 by rpki-client