Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: B3MiTB+dg2Dv3cZu4GEIx3UyGp4PHUm/d2EpEqTNIuM=
Subject key identifier: A5:6F:4A:55:F2:DC:3D:28:E1:A6:D9:6B:39:6B:2E:B7:A9:30:FC:93
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0197C614968EA50A55A0E6E94D436F3F9618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 12B4
Signing time: Tue 01 Jul 2025 13:02:07 +0000
Manifest this update: Tue 01 Jul 2025 13:02:07 +0000
Manifest next update: Wed 02 Jul 2025 13:02:07 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: CsJVzD2GBRfLwMhYs/hDlyYTL+nWNWI22zi5ghha94o=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:96:8e:a5:0a:55:a0:e6:e9:4d:43:6f:3f:96:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jul 1 13:02:07 2025 GMT
Not After : Jul 2 13:02:07 2025 GMT
Subject: CN=a56f4a55f2dc3d28e1a6d96b396b2eb7a930fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3d:33:05:84:dd:53:5a:51:2b:56:f8:15:6e:
ff:5f:97:58:a2:06:13:5d:22:44:46:67:cf:07:2d:
c3:1f:5c:3e:03:13:92:68:4e:71:52:f8:cd:0f:08:
d0:0f:32:9d:e4:7e:82:0a:6f:9b:c5:76:7c:25:1d:
45:18:45:2e:3b:ed:8e:62:c3:a1:76:4d:e3:72:e4:
cf:38:a7:51:e8:e6:6a:72:c1:1d:ba:b8:7c:f9:82:
44:16:e5:7c:f7:98:37:54:4c:fb:4a:5a:d8:6c:20:
6e:95:3a:6c:cd:55:63:ed:09:6f:4f:62:6e:34:1c:
b8:a1:59:9b:20:2f:e8:59:b3:46:7a:ef:4f:25:37:
a1:5e:a2:c2:5d:cc:08:bc:9f:9d:21:79:a9:c9:0d:
53:e8:ed:87:29:45:6e:a5:6c:c2:9d:ff:38:de:f1:
64:9b:cf:8f:76:f2:e0:81:72:17:96:34:a7:26:2f:
8e:1a:05:c0:d5:e9:1b:86:11:81:89:c5:8c:b6:0f:
e8:ad:86:b1:45:57:9a:f4:0b:54:18:d4:aa:94:0b:
0b:f1:3d:29:c8:fd:c1:62:69:de:59:53:ad:76:5a:
5c:ea:51:2c:25:4d:d8:8c:80:5f:4e:2d:d2:a6:f3:
f3:1b:e1:58:b6:8d:da:d9:cd:4e:8a:4e:7b:98:3b:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:4A:55:F2:DC:3D:28:E1:A6:D9:6B:39:6B:2E:B7:A9:30:FC:93
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:62:82:21:1d:9f:88:40:85:aa:b5:85:11:96:6b:8c:f4:
d9:52:74:95:5f:53:10:60:8b:fd:09:01:4b:b3:18:66:b9:cc:
64:1b:e1:9d:f1:4b:13:4f:a1:73:98:e5:a7:f9:d4:19:d9:ad:
2c:9d:94:f8:22:fe:3d:c4:e2:45:a7:c1:e4:b9:5e:a7:8e:94:
e5:9e:bf:87:4f:0f:c8:5c:2a:00:17:ba:95:bd:7d:73:43:3d:
c5:57:e0:26:75:86:6f:cd:10:d6:66:94:c2:78:c1:58:38:76:
69:f8:0f:0f:b6:e6:3c:9f:38:3a:5b:db:46:be:bd:5a:2b:d3:
74:1f:8c:50:b9:1a:c0:9a:a2:4f:13:4d:db:e0:e0:a8:16:a0:
e1:2c:88:31:fd:09:ec:20:6d:8c:4a:9c:60:8e:2b:4a:95:ad:
a1:6d:76:e8:a5:18:9b:04:84:b7:03:55:ab:f7:e1:83:e2:c3:
94:6a:8c:17:aa:ff:4c:75:d9:38:a1:d5:7f:6b:89:bd:13:fa:
80:f2:0c:8b:a7:6b:b7:3c:58:58:0c:89:2d:6b:cc:62:4b:7b:
74:1a:1e:40:90:71:22:82:1f:8e:cb:46:b6:cd:8d:dd:86:fc:
94:d2:0e:61:39:03:8c:e2:28:6b:ef:92:10:6a:2c:7f:ab:d8:
e8:44:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:34:56 2025 by rpki-client