Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: wpzJa7rGRMDcCgZHRDAZt5nr/0HDEAyKXCCT/8fxV/w=
Subject key identifier: BB:F8:97:2B:E1:2D:45:7B:AF:79:EA:1D:D2:CB:EF:23:7E:30:71:8D
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0197B70EC379B292A631877D94B481D09B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 0661
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: S12Nr1D1uly7kil4w8WtLL3gUpoZYpkJGUeCZ1KxHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c3:79:b2:92:a6:31:87:7d:94:b4:81:d0:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=bbf8972be12d457baf79ea1dd2cbef237e30718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:c0:19:64:82:a7:c2:3d:17:6a:de:51:9c:
fe:4d:37:f1:e6:f9:2d:76:a0:23:f3:2d:c5:46:c2:
61:36:44:5c:d6:28:66:b2:3e:eb:24:65:ee:e2:f0:
82:06:bb:63:19:eb:59:9f:ff:6a:dc:55:07:13:ef:
24:af:79:12:fe:d7:84:42:c0:68:ec:80:25:87:02:
52:69:01:8f:31:cc:36:93:e8:f2:46:fb:a3:79:df:
03:7e:2a:12:bb:b0:c6:99:cf:16:88:94:85:bd:b6:
b4:4b:d2:5c:51:ed:c8:6a:f7:b8:08:91:23:7c:ad:
8e:80:0f:f8:64:92:c7:91:dc:4c:8f:3c:7b:a0:27:
76:3f:88:ed:3f:69:1b:cf:e7:f1:f9:60:6a:5a:9f:
c3:cf:df:ac:a3:a2:54:45:c7:4e:7f:e1:a2:d2:90:
bb:77:01:7f:03:84:c9:c8:55:dc:47:d3:44:74:77:
b9:c3:fe:9f:c1:af:b7:d3:9d:91:0f:82:cc:68:34:
7a:68:ca:af:05:56:d7:d3:b7:83:b6:1a:c0:87:e4:
be:d9:47:b0:3c:35:d6:4f:ea:7f:b5:9d:07:44:44:
00:83:b2:11:eb:ef:73:b9:9d:d7:74:01:a3:60:47:
fc:fa:e7:8f:4b:9b:af:c5:54:4e:7b:a6:29:09:d8:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:97:2B:E1:2D:45:7B:AF:79:EA:1D:D2:CB:EF:23:7E:30:71:8D
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:72:1a:a5:0d:b1:1a:d0:3e:e8:dc:51:7b:25:56:38:f2:d7:
54:8a:10:eb:fd:d7:c3:b1:9d:32:2a:7c:75:57:26:51:cd:b2:
f8:7e:af:18:b4:5f:0f:a0:6e:0b:b9:57:ce:9c:d8:fa:4a:14:
83:c4:4c:45:5e:98:87:c4:e3:68:56:ed:c2:02:b9:e7:9a:f0:
9c:3f:02:66:f1:aa:00:e9:35:ab:d9:7c:9f:97:7c:da:b8:e5:
64:07:ab:b5:13:fa:1a:4d:1a:92:31:6f:7c:a2:f7:5d:c7:e0:
c4:19:c4:7b:bc:ba:ee:25:64:1a:0d:16:0a:66:b4:29:c2:99:
c7:5f:02:aa:32:3e:b5:7e:2c:de:32:85:4b:7f:2e:39:a9:2d:
9f:ae:29:d2:d1:7e:ad:e3:e2:65:b7:b1:d7:94:b0:6b:d7:32:
cb:48:a5:e4:10:9d:e5:60:75:f3:4e:db:6f:37:7f:27:48:57:
2c:b4:0e:fc:69:b0:14:cf:1a:77:f5:8e:bd:28:06:79:78:4a:
c8:19:6d:3c:eb:a1:bd:aa:05:f2:ba:bb:e6:c5:22:d8:14:0d:
4c:33:ba:5f:28:21:39:c7:be:b9:b0:9e:c5:9a:f8:0c:55:67:
bd:01:7e:96:b0:a7:7c:11:ce:9c:07:c5:11:8e:88:7a:7b:4f:
a6:f9:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:03 2025 by rpki-client