Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: yf5diYiSvUHNXne0QNuDeqjxd5T1KhkSMf8uwzINOYw=
Subject key identifier: 17:DB:C0:D4:65:4B:B5:CB:03:36:31:DD:59:0B:3A:B2:C7:63:91:AB
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0197BA0F8BCCD414524595C6CF98AEF67B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1302
Signing time: Sun 29 Jun 2025 05:01:10 +0000
Manifest this update: Sun 29 Jun 2025 05:01:10 +0000
Manifest next update: Mon 30 Jun 2025 05:01:10 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: 0RNP8hubLEalw3S0U4W9/MQnFQI+TAt2TWsY+gOrxSQ=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:8b:cc:d4:14:52:45:95:c6:cf:98:ae:f6:7b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jun 29 05:01:10 2025 GMT
Not After : Jun 30 05:01:10 2025 GMT
Subject: CN=17dbc0d4654bb5cb033631dd590b3ab2c76391ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:fc:b4:67:8f:4d:2e:90:41:ff:4a:e9:20:
d3:d8:ef:e6:58:27:09:4e:d0:01:fa:e2:c0:59:7f:
5a:89:85:16:b4:e3:f5:f4:43:8f:56:36:78:25:ee:
1d:cf:29:a1:f9:ef:7d:c9:dd:25:3d:81:f4:2a:c8:
f3:c7:c3:08:0c:de:46:c6:c0:13:bc:0c:83:c7:48:
b7:c5:ed:e9:e6:dc:e3:f4:47:b2:e5:7b:42:35:cc:
f0:58:7e:6d:a4:95:0e:41:08:6f:e9:a5:c5:ef:28:
b9:b8:09:1a:d8:ed:83:80:a1:b1:b3:5c:db:23:d1:
45:f6:f3:4f:80:9c:4c:b1:34:71:dd:2c:7c:3f:c4:
2e:6a:eb:b3:2a:c3:57:97:e3:98:7e:c8:1d:79:31:
11:81:4c:51:6b:db:cc:0d:b3:ae:e5:39:76:be:b3:
63:b9:a7:cd:82:9e:c0:3a:18:1f:2d:68:9a:38:05:
30:a3:35:ea:36:1a:ef:2f:06:1b:b4:b5:62:44:7c:
6f:13:a8:03:47:68:ab:a0:19:99:b0:ce:61:fb:c3:
8f:32:c9:88:6e:39:46:1e:48:e6:4b:00:d7:6d:5c:
77:d8:d5:ac:54:f4:4a:6c:be:27:70:75:e6:b2:59:
5a:d7:ae:a3:9a:3b:ed:f0:d4:6c:9d:9f:01:2b:2c:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:C0:D4:65:4B:B5:CB:03:36:31:DD:59:0B:3A:B2:C7:63:91:AB
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:b1:18:c4:e4:29:f1:56:a0:fd:73:29:8f:6c:30:c9:3e:
e1:bf:b8:28:60:62:97:72:0b:37:0c:b8:3d:7f:fb:ff:ee:ab:
13:f5:66:c7:3d:e1:ec:e8:be:cf:60:aa:40:3c:eb:98:eb:84:
ea:e0:dc:dd:d6:08:2b:9e:53:8f:35:0c:ec:1b:4d:3e:88:7d:
40:e0:95:b7:3c:96:9c:67:aa:be:0f:3d:d2:b5:67:3f:c5:12:
77:f6:c4:1d:20:87:1c:33:e3:ce:5d:4e:6b:6c:70:8a:bb:f6:
a7:23:b1:59:ad:06:03:9c:95:66:c5:f3:aa:7f:c3:bf:74:83:
02:3b:4f:da:0d:6f:29:ad:ca:44:ea:1e:63:b8:55:cc:29:e4:
fa:ec:d6:cf:db:b6:ce:fa:6a:a3:f3:8f:a9:1e:ec:b9:6e:0b:
08:34:f7:0e:9c:2a:17:2f:3b:b0:e2:85:e2:f8:e6:82:b6:96:
ba:8b:e0:bc:2b:34:6c:11:5f:4c:ad:69:44:bc:ea:a2:96:e9:
9c:94:fb:29:77:5c:ef:e1:f6:49:7d:61:3d:c3:d0:38:59:70:
9f:b4:2d:98:10:c6:56:fa:c0:91:43:6d:df:39:ca:8d:7d:46:
86:69:01:a0:3e:6c:27:34:83:e1:7b:24:bd:37:63:3a:e8:9b:
ae:af:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:24 2025 by rpki-client