Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: FeBgep65+7059IKYngzDq+7mVf8qreVa27PnVK0+7jg=
Subject key identifier: FB:26:AC:61:A7:2F:F2:43:2C:F2:6C:75:BD:1E:E5:D8:46:63:19:E5
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 0197B77CD2E5385D6B18B7AE3E06FB5CB2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: 1UsJGC1FnkiktVy4j9dAMcDXQ6rOWReOJjISpi7mjCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d2:e5:38:5d:6b:18:b7:ae:3e:06:fb:5c:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=fb26ac61a72ff2432cf26c75bd1ee5d8466319e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:45:09:4d:43:4c:e5:ca:80:c7:de:fb:e5:
b5:3f:38:88:36:13:e4:69:de:88:e3:d4:c1:87:67:
17:e2:c4:1a:4a:6a:33:b5:e9:71:27:a9:41:a8:50:
be:90:a8:7c:9e:50:5b:40:a2:1c:70:75:97:a0:52:
b9:bf:bd:81:8c:0b:ad:2b:d6:41:55:31:9b:6e:29:
ce:9b:f1:c5:c4:be:11:77:08:60:8f:f8:1f:5c:61:
ed:06:b6:5b:a9:39:76:53:df:61:f0:d3:83:46:e1:
e6:7c:cd:0e:ca:7b:5d:24:fd:d3:2f:6d:61:90:55:
37:d4:fc:7b:fb:e5:76:f4:61:bd:13:f1:83:62:76:
93:49:f9:7c:a6:24:36:a7:71:f1:90:df:0e:30:fd:
72:78:cd:38:fc:3f:dc:45:83:60:6a:20:5a:70:22:
e6:24:7c:40:63:46:6f:13:eb:b0:e6:5c:4b:55:50:
2b:6d:06:44:55:a4:23:ff:e6:54:ae:59:21:c4:0d:
14:59:ef:03:04:8d:48:ac:fc:63:53:b7:d7:3d:18:
3c:dc:7d:34:bc:89:da:93:3c:7f:a4:35:07:77:a3:
40:e9:2f:c9:a1:fe:cd:25:32:a6:d8:79:07:7f:e3:
23:9c:64:75:40:4a:62:51:4e:ed:32:43:41:9d:b5:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:AC:61:A7:2F:F2:43:2C:F2:6C:75:BD:1E:E5:D8:46:63:19:E5
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:97:68:5b:39:26:52:9d:8c:df:f3:30:f4:44:d0:c6:3c:
31:85:8f:c4:ba:6b:ab:cc:15:34:56:b8:91:41:fa:9f:75:98:
8a:26:8f:04:83:39:07:b2:54:d4:e2:71:8d:88:51:53:60:e0:
76:5d:51:32:f7:ee:b6:2a:37:71:57:d3:36:23:e6:92:a6:0e:
ab:75:ba:01:31:5d:13:6e:ce:5a:0a:79:a8:eb:7d:88:86:5d:
c0:14:7f:cd:ef:9f:a8:6c:a9:7f:a8:29:8d:96:c6:f7:0a:70:
9f:36:22:2d:ea:45:e1:ba:a4:1d:fa:eb:06:dc:56:b9:35:7e:
8d:6f:b1:a8:47:c7:5e:75:60:79:5d:00:75:94:ed:b3:86:ac:
0d:10:31:1b:b7:90:7e:40:1c:51:21:0b:e6:0a:17:d4:b1:b3:
d1:af:61:d3:20:42:c6:c2:de:ae:8f:1c:a3:75:c4:9a:9e:62:
9d:c1:21:3a:7d:42:4a:e3:c9:87:f6:76:a2:a6:06:3d:90:48:
40:db:38:a1:df:05:1e:90:b8:4b:98:c0:38:5e:63:30:df:db:
4c:78:cd:a1:9d:77:cf:b1:cb:cd:24:7d:95:cd:eb:e7:21:8c:
c4:e0:2b:a5:0e:0e:f0:eb:82:7e:18:63:c8:45:66:32:78:62:
b2:b0:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:28 2025 by rpki-client