Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: tyQvAKhUGC7o5h8Myt7msBU7U2C0Vf3EFI6DlgAHVLA=
Subject key identifier: C4:ED:BF:0E:0A:40:D8:DE:B3:BE:3C:D4:A8:63:43:FD:80:61:73:A8
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 0197B6A1C50B0E070A46F72A2402918E1624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: wtMj2vA8Lx8Q4TEE9pFn86vO7celiAiNSGQ1ImMaKEY=)
2: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c5:0b:0e:07:0a:46:f7:2a:24:02:91:8e:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=c4edbf0e0a40d8deb3be3cd4a86343fd806173a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:b6:a3:1f:bb:50:34:24:e2:c2:5e:d9:da:
59:29:2f:a3:9c:14:cd:9f:2a:a0:38:24:8f:b6:c1:
bb:fa:d5:9d:29:67:cd:19:41:60:2d:5f:51:34:61:
1a:80:da:ea:85:09:fa:ee:47:62:aa:a6:1f:09:c4:
b5:7d:c5:1e:2e:13:96:0c:13:37:bf:de:f9:d8:b5:
85:a6:77:a4:ef:a7:84:4b:9c:98:21:1e:2a:e0:0c:
ae:fc:b5:0c:7f:71:06:b9:47:68:36:87:d9:4f:b4:
77:8b:3d:49:cf:38:7f:c1:5f:4d:13:23:84:ff:f8:
8d:4b:e6:f2:0d:04:c0:df:56:0c:8f:61:92:f0:a5:
ad:62:d9:18:3f:a6:00:5f:81:8b:a8:25:5c:2a:2c:
71:31:ca:de:de:36:0f:29:08:6a:f2:73:0e:20:e6:
fc:ad:98:8a:84:df:1c:ae:57:1c:f2:4c:b9:30:ad:
9c:94:6d:f5:c1:8a:6e:33:10:8b:aa:fb:fe:02:46:
9b:5f:ba:1a:06:3d:a0:ef:31:2d:9a:5e:31:53:aa:
0c:51:fb:ec:65:1f:af:66:9e:3b:e6:43:a4:b6:46:
8a:ba:da:bd:21:1f:14:92:93:81:4a:e1:80:e7:da:
3d:40:56:21:0d:f5:ed:15:51:a6:7c:48:69:e1:16:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:BF:0E:0A:40:D8:DE:B3:BE:3C:D4:A8:63:43:FD:80:61:73:A8
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c7:d4:a9:72:46:c1:9e:45:19:79:46:e1:ef:e0:be:7d:23:
a9:b0:63:fa:7e:48:3b:fc:b8:15:90:4d:e9:f2:14:1b:74:8e:
2a:80:dd:cc:00:90:61:f9:6a:2a:85:2c:e4:0b:88:e2:2f:7d:
74:c3:8a:10:d1:ce:66:92:a5:1b:66:90:c0:e9:50:00:bf:17:
5f:2a:ef:cb:77:19:19:01:75:bd:00:73:49:67:16:95:09:82:
26:42:ca:0e:78:4a:6d:27:b9:35:e8:8d:33:1d:81:3a:16:a8:
6f:57:71:0f:79:3a:f6:28:1c:8e:27:23:eb:ff:72:96:48:4d:
bb:78:9b:3a:ab:96:0f:e6:7f:1d:79:59:cf:31:b4:f7:d4:31:
f8:41:f8:34:57:75:e0:45:28:5b:8d:a4:e0:5e:d1:d5:dd:01:
77:48:66:49:5b:01:6d:5a:ea:78:04:a6:fc:fa:52:d2:cb:5d:
ac:91:c0:12:52:d3:54:bc:59:87:f8:c2:17:b4:e0:67:b3:d7:
54:9a:92:5c:f4:d6:78:42:b2:54:af:8f:00:4e:38:7f:4f:02:
01:28:02:47:95:fb:dd:25:4e:54:90:06:70:aa:ff:0d:08:bd:
81:e6:f5:80:06:40:54:1b:b2:71:dc:a0:29:8b:f5:8a:3e:c0:
f5:41:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:29 2025 by rpki-client