Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: dlc4O7+kWD40WGk8rECRI9V35eDz4U7LV4KMAj1BgTg=
Subject key identifier: 15:AD:AF:A6:52:42:30:F3:E2:3E:AB:12:62:E5:8A:FD:B5:AD:19:E9
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 0197B70F3454F8CCD52FF5F6FEF835329E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 0650
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: gjhLWOOeAvtt7SbPe77a3rjgLJBbwOyh1loFhGrdOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:34:54:f8:cc:d5:2f:f5:f6:fe:f8:35:32:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=15adafa6524230f3e23eab1262e58afdb5ad19e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:38:b6:02:9c:b1:7c:a3:5e:5f:90:12:75:
77:96:2d:2a:f5:bd:bf:35:35:5c:68:cd:a2:76:50:
ac:e7:63:0e:cd:1e:4f:3c:20:bc:0e:ef:c6:69:4b:
c9:94:55:b4:9a:c2:7d:c5:39:8c:68:3e:b5:08:83:
85:42:bb:e4:69:24:78:cb:38:cb:59:26:02:7d:38:
46:b3:c6:e6:03:c6:0d:9a:d4:b6:d6:08:6b:90:63:
be:0d:28:0a:74:e4:8e:bc:94:89:22:19:6e:2c:04:
89:d1:9b:d2:a2:18:b9:e0:b7:f0:33:02:de:97:34:
db:1b:79:ae:d3:e2:37:1a:c4:3a:d3:b5:5f:a9:37:
90:ee:db:20:30:d5:2f:c3:60:ca:cd:cd:71:c4:5d:
5f:e2:02:16:05:7b:4d:ba:cc:15:32:9d:65:90:0c:
26:da:6b:e6:15:a8:53:a8:34:37:08:a7:f2:e1:ca:
ce:fd:c0:9d:24:ce:9e:6a:64:38:d3:18:99:b5:fd:
16:03:a5:ae:fa:59:4b:07:d1:db:6b:ac:b5:39:16:
d8:bb:17:19:41:19:23:1b:ea:bb:a8:17:c0:6c:ac:
e4:28:7b:13:35:d5:1b:ba:69:80:c1:a4:66:fb:20:
22:70:a2:fd:22:d2:11:79:0f:a1:11:e2:6b:70:c6:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:AF:A6:52:42:30:F3:E2:3E:AB:12:62:E5:8A:FD:B5:AD:19:E9
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:19:38:c0:15:0d:73:68:4e:d6:2f:67:3c:88:0f:35:f5:
30:88:a2:6f:30:f7:71:fb:95:2d:47:08:5e:a7:5f:b7:d3:51:
59:93:98:ad:0b:80:98:82:f3:4d:cf:7b:d1:0f:4e:d4:64:65:
70:b6:14:64:d4:45:8c:af:c6:03:c9:bc:f4:52:69:fb:c3:82:
fd:97:96:f8:3c:f7:24:d8:ac:c5:0e:77:75:46:8f:7f:79:94:
3f:f6:16:8e:bc:9d:5c:b7:05:6d:fc:ff:9a:e9:ff:1c:0f:39:
e2:60:b3:25:83:ac:d2:8d:7f:fd:14:19:75:b9:2f:73:45:09:
3d:81:e1:82:30:a5:f0:8f:7d:01:3e:6f:da:5c:90:b0:fe:2a:
dd:df:38:b2:9d:d2:e9:f9:fa:93:e7:da:6f:07:ee:e9:ed:9f:
d1:8f:b4:66:28:a5:1c:eb:33:64:ec:6d:27:4a:6d:c3:a8:86:
0c:c3:1a:75:e7:7e:c3:d8:21:47:fc:52:24:b4:ad:ea:2c:5e:
59:e7:e1:7b:37:ca:35:91:43:1a:32:ec:be:74:d3:66:8a:13:
7c:58:95:b9:56:ac:37:fb:d2:9a:f6:d3:a9:c5:fa:7e:16:74:
2e:a3:f2:bb:78:48:91:f8:69:a0:0e:91:9a:0b:7b:c4:cd:86:
d7:f0:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:29 2025 by rpki-client