Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: vurSM8SrIvpl21ufZZ+BKT3UCQiZ6ActiLp9CSNCGaI=
Subject key identifier: A8:4E:D8:BB:31:00:B4:25:15:B9:F0:AA:62:F1:F6:31:5E:99:B1:6C
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 0197B70E94714F91CDC53DD28B857AB6A9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: 2tEAwc1GdgJDmEqnchpTkgh4fPiI+y0DEB1eTLJ1fWE=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:94:71:4f:91:cd:c5:3d:d2:8b:85:7a:b6:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=a84ed8bb3100b42515b9f0aa62f1f6315e99b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:2c:de:77:00:5e:12:a8:38:56:bd:c7:0e:
d0:ef:73:31:2a:98:eb:9f:98:6c:ef:32:9e:e3:4c:
d5:6d:dc:a5:33:a2:64:ca:c4:19:32:0f:cd:04:14:
64:40:a8:7e:dd:3b:45:cd:8d:50:2f:fa:e5:34:3a:
49:a4:df:44:cb:c9:1f:b8:c3:4f:48:ef:51:23:2f:
e4:72:fc:5d:de:dc:28:df:36:53:96:dc:d2:35:62:
d4:a6:a6:23:79:72:35:dc:c0:46:d8:a4:c1:37:ef:
47:58:d9:48:c2:3e:1c:8b:95:9c:f3:31:4e:fc:39:
de:8c:6b:8f:89:32:56:18:ee:9f:10:00:27:8a:63:
c7:39:28:57:b3:37:b5:b9:6b:97:34:90:02:e8:2f:
3c:51:cf:6d:0c:1a:a6:55:a3:79:04:60:03:9f:08:
37:ee:b5:95:59:52:8b:8a:e7:b2:3c:c9:f0:17:fa:
ff:98:31:51:6b:6a:79:d0:84:f6:6f:90:3b:3c:bb:
54:4f:1f:82:d9:6c:a5:70:fc:9d:a3:0f:8c:19:85:
2d:30:26:dc:89:c8:41:0b:82:2c:b5:09:77:1a:a6:
44:a4:42:a4:46:bd:39:f4:e4:30:3b:d8:fe:d5:35:
88:f2:96:e6:b5:94:54:94:68:84:1a:8a:be:45:47:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:D8:BB:31:00:B4:25:15:B9:F0:AA:62:F1:F6:31:5E:99:B1:6C
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:11:a6:89:17:94:72:f2:e6:db:cc:2e:f6:68:11:a1:fb:77:
45:90:58:a6:c5:8a:b4:9f:fd:36:81:34:b3:e3:15:01:d9:2b:
48:58:a6:0c:d1:32:ad:cb:a5:4a:8d:d4:ce:3c:9d:cf:03:0a:
67:cd:27:c3:3e:d6:50:f1:5e:d7:60:07:f3:44:30:1a:2b:c2:
6b:57:97:04:b5:6a:24:d9:cf:9d:5f:22:a2:59:48:6e:5f:d5:
7f:b6:75:9c:65:92:d3:19:52:8e:e1:20:74:bb:cf:7d:24:df:
8f:54:a9:bb:5e:90:a4:ac:fc:da:f6:19:52:3c:99:f0:7c:e1:
8c:41:04:28:ea:1b:06:a2:cc:e1:18:a1:44:41:83:f1:35:e5:
86:2b:9d:2b:82:da:1f:84:76:5f:33:9c:4c:f7:8e:c0:bc:41:
3a:ee:f1:a8:b2:09:12:fd:81:2c:3a:48:85:b3:17:45:50:7a:
3a:6c:3d:96:59:47:ed:d1:e3:a6:93:f4:27:30:67:b5:06:c4:
ee:b4:a9:32:37:5f:83:2c:7f:23:88:20:ab:49:f1:0b:47:c3:
34:9f:ff:0f:22:99:71:ac:4b:cd:83:72:d4:03:f3:f9:bc:28:
42:31:ab:04:b2:1d:29:3b:f5:8b:c6:5f:0b:c5:00:66:4c:91:
9e:9a:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:17:30 2025 by rpki-client