Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: P3uDtvjWSugIc05SV785ZtVUWccQJqrlcxsSI/CVIT4=
Subject key identifier: B7:77:EE:EE:1E:97:36:86:9B:84:5F:EC:89:CB:13:37:17:22:0B:8D
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 0197CDCD22F8854FB736A35C219AAD87E1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0D87
Signing time: Thu 03 Jul 2025 01:01:02 +0000
Manifest this update: Thu 03 Jul 2025 01:01:02 +0000
Manifest next update: Fri 04 Jul 2025 01:01:02 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: 9QARB1GABNlr4d5tG9sW7tTHJE+xl9mFrzCrgMadvug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:22:f8:85:4f:b7:36:a3:5c:21:9a:ad:87:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jul 3 01:01:02 2025 GMT
Not After : Jul 4 01:01:02 2025 GMT
Subject: CN=b777eeee1e9736869b845fec89cb133717220b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:e9:17:c2:af:63:3b:4b:f3:64:da:24:70:
6c:fc:6e:76:60:e4:16:43:37:ab:24:0b:db:83:53:
af:d7:bc:42:9a:66:8a:cd:1f:79:ee:41:3e:b1:38:
28:94:bd:07:37:9c:48:04:ca:b3:8d:84:40:8d:13:
9e:13:b0:45:d8:72:78:ec:61:79:6c:1c:49:0c:fa:
b6:63:11:14:1e:ee:1d:9e:7a:3c:5a:fc:ba:46:03:
98:24:b3:84:16:85:8f:64:aa:d2:fb:8f:70:d6:7d:
3d:57:d4:dc:78:87:f8:0d:ca:30:c9:c3:bb:39:bb:
19:bf:69:95:f6:56:39:8e:d2:5a:56:24:bc:e0:c2:
e5:27:af:1c:32:b0:c6:bf:cc:32:14:fd:69:2d:90:
49:88:bd:98:35:48:dc:7c:ad:26:9a:7d:98:9e:f5:
29:a3:cb:10:48:2c:d3:06:f6:12:6b:53:c4:ab:ff:
71:3d:d9:88:9c:8c:7a:0e:88:ef:21:58:56:3e:81:
77:3c:45:2d:27:d8:7b:d6:96:e1:b3:08:31:3c:9e:
d4:35:21:21:ff:e5:a5:90:df:ff:66:26:a1:f9:55:
ae:14:cf:53:74:1d:9f:94:1c:40:2f:3d:25:d6:58:
b3:de:e4:d6:38:89:5d:23:4c:3f:19:c1:5c:19:c0:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:EE:EE:1E:97:36:86:9B:84:5F:EC:89:CB:13:37:17:22:0B:8D
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:8a:41:5e:c5:bd:dd:74:95:2f:f9:4c:b8:d3:88:e6:71:
97:5e:9f:59:40:10:1a:82:10:2e:60:7f:43:97:28:87:c0:30:
fd:16:18:73:2e:2e:ca:26:c3:8c:38:c9:fb:c9:65:f7:a4:0a:
e0:88:7b:9d:9e:49:03:37:70:84:8b:c5:c5:c6:21:38:ae:24:
24:a5:8b:3e:5e:dc:50:31:65:8f:fa:46:bf:3d:aa:fa:1d:85:
66:9c:bf:b3:b3:14:80:20:5b:d4:4f:b8:4b:5d:aa:f7:42:d2:
09:37:2e:db:d7:03:5a:f5:b2:24:97:3c:24:ea:9c:55:5b:ea:
b6:46:ed:fb:95:fa:9b:5c:23:ea:98:da:7f:50:c5:25:88:5c:
c0:aa:19:2d:48:91:eb:72:a8:e8:80:ad:e7:93:c2:94:ad:8e:
af:57:4b:31:3a:78:d7:34:60:2b:8f:b6:a1:1c:5b:43:08:a5:
64:5d:56:d2:2f:ad:a8:59:24:d1:7b:6d:0a:c0:8d:b6:ba:fb:
76:e9:fd:a2:83:92:d6:c7:22:bd:f3:f7:4b:96:da:0b:0e:47:
f3:7f:b4:5d:80:65:61:b0:03:64:06:c8:43:d8:9f:38:d5:02:
da:a3:61:92:d6:ce:24:a6:e8:47:de:1e:15:fe:60:cd:2e:1d:
57:c7:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:05:11 2025 by rpki-client