Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: zTAy7Vj7i6HqdqcJq/U1xHOqUJGa3AmkyM22lDnWAbA=
Subject key identifier: 1E:C9:BF:8F:F6:FC:EA:46:BA:F8:6C:41:6A:A1:07:0C:D1:B0:07:CE
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0197B7B30971A8FB467A96E2EA75F23DE81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 08B2
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: vM/YTVbz3Ke3dog8/FZtz549odOlM5F5kZ7rrky3mqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:09:71:a8:fb:46:7a:96:e2:ea:75:f2:3d:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=1ec9bf8ff6fcea46baf86c416aa1070cd1b007ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:88:62:31:ef:05:09:09:9e:e2:92:ff:bd:
c8:10:99:47:92:a7:70:42:e9:1d:fd:5d:35:d9:e0:
a8:43:25:61:b8:c8:38:ff:3d:3c:1a:22:80:2e:ce:
82:87:40:0c:0c:1c:60:ca:19:89:28:ea:e3:f3:ba:
7c:27:3c:6d:b1:9d:41:24:51:de:36:58:44:73:74:
02:d2:d5:03:d4:5f:95:91:fc:d7:a5:bc:99:0b:5e:
a2:9e:5d:53:f1:37:9b:b1:65:5f:ac:0e:53:b2:c2:
57:e4:8d:bc:5a:5f:c3:fd:dc:e2:98:45:d2:28:2a:
08:a8:76:a1:5a:7a:82:40:dc:de:e0:7e:e3:28:1a:
6b:5a:02:95:5f:a5:d0:d0:23:81:de:28:30:bc:16:
f5:69:df:80:2f:89:c9:c9:2c:82:89:be:eb:ae:05:
46:47:9f:82:5b:a3:a3:1a:89:b6:ec:74:e5:fa:a7:
40:b4:f7:27:d9:a2:d9:15:20:ad:5a:95:7c:f3:03:
0c:32:3f:79:0a:e7:29:08:db:e4:8f:00:42:02:29:
2f:e0:0b:4a:e3:ce:6b:a7:a9:86:62:0e:c9:20:c1:
67:d8:2d:4c:55:b8:57:97:39:8a:b5:8f:0b:58:e7:
b3:e0:30:81:88:48:43:d3:d5:41:f0:bb:54:59:b4:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:BF:8F:F6:FC:EA:46:BA:F8:6C:41:6A:A1:07:0C:D1:B0:07:CE
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f1:13:df:5e:93:74:0c:d5:fd:5f:d7:f4:46:ff:8b:08:6f:
36:bb:9c:fc:6f:b6:3f:10:45:12:24:63:91:a0:9d:a9:52:45:
27:4b:e2:d2:f3:c3:06:1d:44:9c:b3:c6:66:d6:82:3d:16:01:
bf:2f:8a:1e:38:88:df:6c:02:7d:19:b7:b9:11:5b:35:99:f8:
58:4b:27:f6:6f:e6:4c:67:17:2a:0d:61:54:3b:43:af:68:f2:
f0:d9:ba:af:fd:14:c3:d6:af:82:19:22:1f:e1:d0:a0:ce:b0:
64:d7:79:d3:cf:6c:96:27:72:0b:44:bd:3e:22:74:1e:7a:f8:
f4:a3:00:8d:48:1b:d6:e0:0a:9f:01:a7:5d:b5:82:8b:7e:6f:
1f:c0:2a:c8:e3:d0:7c:19:9b:ef:98:91:63:5c:f2:e8:14:30:
3e:55:27:02:75:56:f1:f9:21:ec:49:41:52:ad:66:13:c7:bc:
32:bf:1d:46:ac:98:d5:31:e9:82:f9:ea:d8:f6:52:36:99:4f:
b4:9c:72:6d:1b:f2:9a:52:a6:5d:c5:75:22:b2:1e:59:d1:4a:
ef:95:35:e7:6b:2f:48:a5:e3:d9:8b:10:71:3d:ec:fa:e4:b0:
e8:81:96:83:f7:01:ca:5f:ee:24:0c:d1:d1:4b:9b:9d:49:9c:
77:67:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:56 2025 by rpki-client