Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: Gz+K76qIK8t/eeBEPvQf8N4mEEmXxDflUob6j2PsSbg=
Subject key identifier: 1D:61:83:99:E1:39:54:F3:B4:78:5E:8E:C5:FB:08:8D:94:02:74:17
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0197B77C5ED7F1BF7F6E89E5D35B77B84973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: B2lobQ1DgEcupcAjdE0ydcOahSzxAGKo8xaw56/vGe8=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:d7:f1:bf:7f:6e:89:e5:d3:5b:77:b8:49:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=1d618399e13954f3b4785e8ec5fb088d94027417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:f8:82:f2:b9:9d:c8:d2:21:c2:74:ca:14:
76:04:99:06:65:06:4f:44:2c:a5:99:38:09:24:2a:
a2:90:42:21:f5:06:97:ae:52:a5:6b:b1:2a:73:3c:
8f:e0:dd:35:14:f0:9c:c5:d5:c2:95:0e:0d:9c:42:
d7:d8:3f:70:8f:4b:2b:5f:c1:a0:20:13:4f:c8:08:
0e:47:f2:90:ed:2b:96:83:b3:6d:3d:c7:e8:ed:a3:
a9:49:51:10:ae:b9:93:db:a2:c2:79:7c:a1:16:48:
37:67:08:b4:81:5a:eb:c8:28:af:76:2f:3f:e8:92:
ed:a6:80:21:43:07:7f:94:16:1c:83:4a:fa:8a:88:
aa:55:58:e7:4e:50:57:b9:88:29:1e:d5:9d:69:32:
19:5a:09:e9:40:d0:7e:a3:5f:e7:2a:11:37:68:85:
59:c0:de:aa:90:e1:07:07:f9:e6:58:9a:3b:78:80:
09:1c:a4:8f:be:83:36:48:cd:27:7f:3c:40:6e:0c:
2f:a1:ef:ee:3b:ce:72:0e:f5:e0:c6:5b:85:e8:cb:
78:9c:1a:1f:fb:9c:07:bf:42:5d:58:b9:9b:48:f0:
5a:40:2a:1a:23:48:b1:a7:75:8f:8e:5f:e1:0a:96:
d6:bb:09:c7:78:ba:81:8f:02:ab:2f:3a:04:fe:04:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:83:99:E1:39:54:F3:B4:78:5E:8E:C5:FB:08:8D:94:02:74:17
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3a:80:c0:2f:5f:68:0e:09:d4:3b:fb:b1:fa:5e:18:68:1b:
ff:f8:40:e6:6d:37:e6:e0:40:d5:26:79:d3:24:73:6c:8c:71:
aa:80:0d:82:65:53:c1:5a:04:27:06:6e:14:b2:0f:a6:a5:6b:
d2:92:ce:98:98:1e:ad:dd:f3:5b:c0:d5:b6:9f:10:4d:a7:3d:
32:c5:99:57:34:ef:8d:3c:a2:a1:03:95:c2:be:14:88:0c:20:
d1:d6:3a:dc:f7:fd:6a:6d:83:d9:c3:3c:1d:f4:73:24:7d:90:
54:64:00:9d:ea:1f:4a:ae:8b:58:0c:bf:27:28:64:7a:d8:94:
eb:72:0e:32:b2:f3:e6:c9:29:ef:91:24:50:7d:e1:b1:d4:99:
b8:7c:97:c9:48:7a:7d:a9:7a:a3:39:44:ec:94:d6:a0:ed:3c:
ce:c8:94:ed:e5:c8:8b:80:29:cb:e5:cb:92:d1:2b:62:3c:70:
25:ca:34:41:47:05:a6:4b:1d:b3:a2:55:fb:51:05:82:6d:15:
b6:f5:6d:fe:f0:52:e0:c0:f8:fe:a6:13:02:c3:73:c8:27:ab:
c0:f8:2c:6a:d6:19:5a:02:e6:be:2e:1a:bc:01:99:62:f9:0b:
e0:3c:13:76:56:a5:8d:cb:7c:05:2e:7d:80:7d:42:32:89:91:
a6:11:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:51 2025 by rpki-client