Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: ShIJGO2+Vk7ynDCq2FDgI+/OrUtmvxcN0ozHLul6al4=
Subject key identifier: 8E:44:C1:B9:3F:D7:4C:0E:3D:4A:08:25:F0:11:05:6A:57:B6:D7:8C
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0197C2376B5ECC1B372E5CFD5A5462342604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 14E1
Signing time: Mon 30 Jun 2025 19:01:41 +0000
Manifest this update: Mon 30 Jun 2025 19:01:41 +0000
Manifest next update: Tue 01 Jul 2025 19:01:41 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: uH0O8pLBnRNeSAfO8DNQH4TwKAAVgjboc+9HeqHJ2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:6b:5e:cc:1b:37:2e:5c:fd:5a:54:62:34:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Jun 30 19:01:41 2025 GMT
Not After : Jul 1 19:01:41 2025 GMT
Subject: CN=8e44c1b93fd74c0e3d4a0825f011056a57b6d78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:43:48:ec:19:37:d0:62:1d:e7:06:f8:f2:
f8:40:28:73:92:ef:22:50:fb:cc:55:b6:e1:e7:c9:
d9:1e:a2:30:80:c7:a5:c8:34:fa:cf:44:0d:23:59:
fb:b1:c4:87:2b:81:d5:6e:3b:be:17:0d:4f:b7:ca:
23:b5:2b:d9:02:91:15:7a:2e:6f:40:1c:cd:51:13:
33:31:61:67:e0:8c:c7:39:cb:e7:9a:ea:8e:20:df:
5e:a6:2a:c8:6a:f5:99:d7:6f:ba:9c:ab:4c:26:4e:
b2:64:b2:00:32:b5:3d:66:b0:44:1e:77:47:c3:7a:
8f:96:0c:01:d4:8a:e7:db:93:7e:5c:bd:7b:a5:ef:
86:38:d0:8b:5e:71:6e:5f:bf:12:58:d8:c0:10:cf:
fd:cb:f7:ca:01:b6:a0:c0:e2:af:3c:0b:dc:e3:d2:
bb:5a:af:6e:34:10:19:27:1a:33:47:0c:ee:3f:27:
e0:e3:cf:95:b9:e9:80:a7:ca:e5:88:52:d4:92:f5:
ed:2e:e0:2e:5a:11:ad:7e:e4:72:da:28:e3:ee:a6:
e6:b6:76:12:2c:26:c9:7a:0c:4f:d8:fa:05:5a:e4:
fb:14:95:05:31:6b:2f:eb:e6:a5:6b:f4:95:40:7e:
c0:b8:75:e0:37:41:15:fd:07:0c:31:21:56:5c:3a:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:C1:B9:3F:D7:4C:0E:3D:4A:08:25:F0:11:05:6A:57:B6:D7:8C
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:80:cd:55:10:2e:b9:a2:39:eb:a1:3e:0f:04:d4:b7:36:f2:
52:af:9d:47:a4:00:ad:6a:49:0e:f6:0a:66:b1:28:a4:f8:fc:
be:56:77:11:ae:ba:76:d3:de:13:cd:e2:6a:e9:a2:0c:49:16:
71:0b:6b:72:47:bc:25:5e:de:9e:ae:d7:97:34:9c:b2:0a:20:
a3:55:dd:92:9d:f8:a3:aa:08:dc:61:68:68:aa:ed:24:81:cf:
8e:62:77:98:1e:16:1b:39:cb:76:12:bb:3a:e3:07:d9:a8:25:
74:4b:ce:6f:e4:98:00:68:e7:29:d0:4f:6c:7a:bc:cd:e3:f0:
bc:f4:c1:9a:ab:10:fe:c6:49:88:0f:1f:ad:23:0f:ac:d5:e0:
f7:f7:09:73:d0:cc:b0:4b:20:db:e9:17:27:cf:5b:c1:e1:04:
a2:e1:c0:95:2d:98:a0:de:f0:32:1d:c2:5f:51:87:06:20:4a:
15:4d:74:ba:94:3c:a2:c8:ec:bf:ce:c0:9b:b1:85:8c:d5:55:
65:cc:99:92:b4:7c:e6:a6:a1:8a:dd:f8:3d:06:06:b4:a5:78:
28:07:c2:e0:1c:d7:d7:12:97:d8:60:20:70:95:2c:74:97:90:
72:0c:df:7c:a9:76:75:ba:71:e9:ef:80:3b:b7:77:13:38:1d:
b3:4d:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:02:03 2025 by rpki-client