Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: KLVMf6udnlWLDaJ6QRO3+BpWu8bb7xuy/YRbExBHZVo=
Subject key identifier: 9B:6E:D0:95:55:7B:C6:7A:32:1C:E9:1D:07:BC:06:0C:23:FE:20:F2
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 0197CE3AC21A2571494396C1B5006C43A783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 05E6
Signing time: Thu 03 Jul 2025 03:00:46 +0000
Manifest this update: Thu 03 Jul 2025 03:00:46 +0000
Manifest next update: Fri 04 Jul 2025 03:00:46 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: z8cQuwAG1LkJhU3tfzaDL+XQHsE+Y101h3jCN9gfaJc=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:c2:1a:25:71:49:43:96:c1:b5:00:6c:43:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jul 3 03:00:46 2025 GMT
Not After : Jul 4 03:00:46 2025 GMT
Subject: CN=9b6ed095557bc67a321ce91d07bc060c23fe20f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:28:ef:f0:c4:80:62:35:5f:8d:0e:54:83:
76:96:52:3c:8d:52:1f:ab:47:27:a9:52:75:e8:b0:
96:03:39:5c:81:d1:6f:24:c2:b9:9d:55:33:8b:88:
6d:4d:47:9a:db:81:6c:9c:9f:1e:6e:3a:90:28:47:
e0:83:9a:de:66:fd:08:e7:77:a1:d5:36:46:53:1c:
2f:b9:58:50:cd:68:5e:1a:6b:d9:aa:3c:b2:a9:8d:
7b:33:d5:e6:70:34:7e:d4:6d:bd:65:8c:b6:c4:a7:
3c:b7:4d:ba:07:2c:8a:f0:53:74:c3:29:85:44:a3:
0c:8b:19:9e:22:94:6a:3a:e0:f3:10:a7:33:1a:8b:
55:32:c6:37:68:32:b8:06:66:2b:4f:b6:31:35:3b:
46:4a:c0:ce:b9:3d:dc:e0:2b:24:9a:07:9f:b2:b6:
95:6b:3a:af:83:13:86:97:d0:71:f8:d2:dd:ae:1e:
ff:e6:ea:4f:ef:8c:89:02:1f:bb:23:af:f8:2a:a6:
5e:ae:be:44:f8:c0:e3:bd:e9:51:11:22:e9:96:b6:
92:24:a4:74:27:66:ea:2c:54:5c:c4:b7:52:6d:d3:
a0:3f:78:23:53:b1:3e:3b:13:6e:1b:f0:c6:dc:93:
b9:97:09:9d:59:51:ca:0d:6c:68:15:a7:0f:3b:cd:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:D0:95:55:7B:C6:7A:32:1C:E9:1D:07:BC:06:0C:23:FE:20:F2
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:5a:4a:1b:51:a0:0f:97:90:c2:16:91:f5:10:8c:d3:99:
78:39:c8:1a:e4:53:4b:c2:e6:4c:bb:43:8c:b2:b0:9b:0b:7a:
07:c7:48:88:04:b7:6a:5d:20:11:27:cc:99:26:84:9b:bc:eb:
bc:32:86:90:b5:b0:d7:59:0c:85:6a:a0:b4:87:ae:b0:ba:7d:
8a:48:33:2c:0a:8c:e8:8b:77:df:eb:95:9a:52:38:8a:6d:95:
9d:e8:59:a7:46:68:d1:61:31:1d:60:c7:95:0a:e0:0d:96:40:
65:e1:2c:82:ec:2f:c0:a1:68:b0:63:0c:16:1d:83:b6:b0:18:
d8:31:09:25:36:35:99:e5:9d:ba:46:22:3e:b5:da:5b:d4:8a:
43:cd:0a:90:0f:95:cc:7b:b4:03:1c:d3:0e:55:ff:a1:ad:7e:
c7:ea:1d:10:18:4b:a6:a2:fa:19:88:4e:a1:d0:25:ad:50:25:
52:d7:d4:e3:e6:77:44:9c:65:bb:51:c8:27:a6:1e:fa:f3:0e:
f5:16:d8:bc:46:dc:fb:a5:c0:b8:fd:c9:0d:54:08:be:2f:24:
79:d3:22:72:01:f2:f6:c4:92:79:92:0f:25:4b:3a:de:ed:44:
e7:f9:12:a8:ba:b5:57:e7:81:3b:2d:48:f2:fe:7f:bb:17:8b:
a7:cf:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:12 2025 by rpki-client