Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: oFEr+eakezii5IpdX3sFbbaXaRaAhHo3GFcqWIbqGBM=
Subject key identifier: 7C:7D:B0:AA:F7:52:47:22:2C:05:B7:48:86:90:49:6B:7E:A1:51:D2
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0197B5FC04447251B66AE3301CAAB53BEF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:21 +0000
Manifest this update: Sat 28 Jun 2025 10:01:21 +0000
Manifest next update: Sun 29 Jun 2025 10:01:21 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 0+oVSYuXEIQfzjXmzViUUO5mztPFSuxbq9/DcHidukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:04:44:72:51:b6:6a:e3:30:1c:aa:b5:3b:ef:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jun 28 10:01:21 2025 GMT
Not After : Jun 29 10:01:21 2025 GMT
Subject: CN=7c7db0aaf75247222c05b7488690496b7ea151d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:05:3d:4a:46:1f:72:47:80:07:04:b5:8b:
d9:44:75:30:27:67:61:73:1e:2b:c1:d1:65:21:39:
47:43:98:29:50:ba:de:e6:76:3f:33:26:6f:b8:76:
d9:c2:38:b0:dc:0e:90:09:22:98:0f:df:19:c2:63:
dd:63:46:b4:03:62:4c:23:00:1f:cd:f2:b9:2c:8b:
9f:ce:2c:ff:0b:b5:69:f5:9e:7b:df:be:23:f3:3e:
02:ae:33:5e:8a:5b:c6:46:c3:f3:39:ea:f5:25:a1:
fd:bd:54:b1:b7:38:31:c3:84:01:e1:12:67:ed:fc:
91:5d:0a:e5:ac:a3:17:97:86:7d:94:0b:ab:2f:7f:
bd:95:7e:e3:36:00:40:82:cd:9c:43:83:2a:63:b6:
77:f6:47:54:a0:55:e5:95:b2:c1:66:44:93:21:5e:
17:c8:f2:7e:d1:88:1a:15:a7:73:69:98:50:8d:87:
cf:c2:1e:a3:1c:21:04:84:bc:49:28:22:71:de:f9:
a2:e6:ab:35:ee:cf:a6:09:12:b0:34:df:c9:df:fd:
c6:ff:44:cc:93:11:e5:fa:88:d3:d9:30:d0:22:18:
f7:e6:b7:ea:fa:ae:84:97:f7:99:3a:10:f4:a8:87:
6a:78:d2:6c:a6:b4:e9:e9:44:f5:72:7a:a2:08:78:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:B0:AA:F7:52:47:22:2C:05:B7:48:86:90:49:6B:7E:A1:51:D2
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:92:b4:65:80:9a:b8:40:a5:b1:7d:5b:e8:69:1b:2a:5a:
7a:be:40:34:ee:f7:0a:6b:0e:8e:7a:e4:22:96:f8:58:ac:03:
b0:14:11:37:02:b4:82:85:43:58:22:cc:9b:33:9d:eb:34:50:
86:c1:fa:18:9b:6a:fe:75:f7:b8:e8:37:f7:31:9b:53:de:86:
79:24:11:28:f1:ea:29:85:1c:7e:8e:78:14:ac:b0:a3:df:12:
bc:cd:2e:e1:5e:ce:59:c3:9c:95:6e:85:91:5d:b1:29:4a:7b:
3a:02:eb:5c:ff:bd:ba:da:cc:bf:16:5a:3b:dc:7a:74:9d:f1:
cd:05:3b:b8:61:74:81:98:a8:75:4b:d1:41:25:8c:59:8b:10:
8c:6c:83:da:66:65:2c:7c:7f:35:ff:cd:80:7e:83:fe:05:e3:
50:fc:87:c8:f6:c0:d3:24:16:b8:e6:11:51:b1:84:b7:95:2a:
07:60:ca:f2:84:00:b9:62:1b:9a:e4:2d:ed:5c:87:e0:81:21:
43:bd:c7:92:23:1d:f8:ac:e7:ac:e8:24:15:63:9a:be:d0:b5:
06:d0:d7:80:d4:47:11:f3:04:c8:0a:18:25:15:65:1f:d7:6e:
62:6e:fb:c4:59:b7:ae:9b:e4:03:03:30:45:14:e3:2b:57:b4:
49:92:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:15 2025 by rpki-client