Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: l9SfDbIJnxDdDVIklXgd9yus25/i4ILEovxx0ykVAfs=
Subject key identifier: A0:F3:6B:A7:CC:7F:23:A9:FF:86:8D:2A:59:24:E6:46:97:1D:20:B8
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 0197B745084565CACB8644476DF93970BF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: tlF1fsFU9O14lNWfJubP1bARflp3b9j2mfVrZv1LrMg=)
2: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (hash: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:08:45:65:ca:cb:86:44:47:6d:f9:39:70:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=a0f36ba7cc7f23a9ff868d2a5924e646971d20b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:35:c4:05:2d:1b:2b:e8:97:9c:6c:51:3d:
00:6a:1d:ff:3b:fd:09:d8:9e:91:ff:c9:b3:a4:c7:
dd:0a:93:36:51:33:0b:94:17:a5:54:31:3e:93:2c:
81:64:38:4a:ea:13:e5:3b:fa:74:24:93:3f:fa:c2:
c4:ff:a4:39:41:c1:ce:92:2a:60:41:5d:bc:3f:9b:
b1:a0:f2:32:8e:56:19:8c:01:b6:1b:f4:9f:45:33:
00:ed:82:c1:53:99:4f:ae:8d:04:5a:78:84:ab:9b:
b7:a4:b9:77:df:26:56:30:70:ce:69:c3:1f:ab:ee:
64:5d:88:08:fa:2e:58:b7:b5:70:4e:ec:7a:cb:38:
7c:a6:f9:df:74:0a:e4:60:99:f2:55:4a:f4:37:c6:
b6:77:9b:9a:cc:97:a3:5d:3b:03:a3:87:0c:72:84:
6b:92:a6:10:83:ae:30:fb:08:d3:98:97:04:63:57:
fa:36:28:44:43:7c:66:5b:e9:71:8b:16:8b:30:c4:
67:09:35:62:62:45:e3:1d:78:60:f8:b4:91:d7:fd:
5d:db:d5:52:d5:17:c3:71:ad:bf:67:a9:b4:59:5c:
1f:19:6c:01:75:b0:83:e3:25:83:d1:7d:b8:4c:04:
4a:e8:d8:7c:d1:c7:c4:49:ec:eb:b0:2b:5b:72:9b:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:6B:A7:CC:7F:23:A9:FF:86:8D:2A:59:24:E6:46:97:1D:20:B8
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:c1:58:cb:1a:cc:a8:68:e6:6e:2d:6f:06:91:4d:70:62:
0a:2b:d6:a3:a4:cb:d3:8a:cc:fa:0a:3a:35:4d:75:24:c8:13:
f7:ef:cf:47:61:99:f1:7b:44:c2:59:66:dc:75:97:91:15:99:
90:9a:b0:62:e1:d6:93:12:ed:28:3e:52:ef:17:2f:ca:6b:b3:
3e:90:d0:08:65:50:ab:3c:24:f8:51:60:a1:91:8a:86:a3:fe:
5d:f8:a0:f9:f9:e5:ba:0c:58:e9:62:d8:80:38:13:4b:65:0b:
2a:2c:ca:ce:fd:80:7d:7b:e1:d1:fb:d4:8b:49:a9:06:f6:76:
ae:6f:9d:be:27:82:cc:17:40:5d:9e:a9:5e:0e:30:23:72:6d:
80:c5:2a:88:e1:a9:a0:2b:1f:9c:f1:9f:1e:fb:07:2f:ac:66:
30:f5:6d:07:77:c1:07:6b:ec:cc:4b:63:05:f3:85:55:a5:40:
22:a2:26:7e:ba:dd:fb:c5:b6:45:59:52:4e:2e:1b:81:1d:49:
d1:42:46:83:81:cd:6c:a7:1c:82:d8:23:23:04:2c:49:3e:53:
8e:b8:1d:f1:9c:88:37:b0:f3:9e:ad:1a:ef:d7:8a:4a:3d:d2:
f0:ec:14:21:47:df:82:21:68:01:2b:61:34:ae:97:ce:84:f3:
24:23:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:53 2025 by rpki-client