Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: Kd97DuESE5QoQAJ8lFM9RzNoXbAmlSCNhE650FQ6Ke4=
Subject key identifier: F2:61:23:60:FA:44:75:71:49:6C:48:7D:30:46:C2:A2:DB:BD:3E:C8
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 0197DB51A940CDF9F9A276EDAFF9EFD341E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 15C8
Signing time: Sat 05 Jul 2025 16:00:51 +0000
Manifest this update: Sat 05 Jul 2025 16:00:51 +0000
Manifest next update: Sun 06 Jul 2025 16:00:51 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: Dv7hd9zs25CSjRIPRY62KAQYo10GeZKnyoIrmQY3xxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:51:a9:40:cd:f9:f9:a2:76:ed:af:f9:ef:d3:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jul 5 16:00:51 2025 GMT
Not After : Jul 6 16:00:51 2025 GMT
Subject: CN=f2612360fa447571496c487d3046c2a2dbbd3ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:28:80:36:63:c4:43:95:2a:09:00:00:1c:
4e:4f:74:90:ce:eb:d1:94:91:f0:9f:94:63:ce:06:
09:b2:32:ff:44:d5:05:d4:8c:4e:ab:14:71:90:40:
99:3d:c4:ad:5f:a5:c5:34:0c:fa:4c:86:2c:62:4d:
69:b3:d4:cc:4d:6a:f8:dc:39:a0:e3:f8:df:0d:b4:
3c:d7:67:0a:f8:59:5f:2d:97:95:4e:d4:f6:15:f6:
a2:d9:3e:ce:7b:33:d7:fc:f5:c9:fa:4b:4c:69:6e:
41:a6:b0:74:7c:e4:22:38:fd:a0:21:52:a7:af:0a:
21:80:cb:74:5f:78:19:31:d2:9c:86:1b:7b:31:9f:
14:f8:15:a4:48:f0:4c:18:6e:d4:21:f2:df:4d:b7:
05:b8:a6:ea:b2:da:88:56:83:20:c7:ae:1b:dd:45:
98:0d:07:c4:a7:15:a3:b3:57:1b:4a:14:dd:36:59:
58:3c:03:17:7c:b3:a6:fa:99:87:90:91:3d:75:b7:
87:6c:7b:27:f2:c5:be:0e:7c:ea:9d:57:e3:e1:fa:
fb:23:a7:50:d3:24:24:0a:9a:c1:a1:fd:32:31:90:
5a:e5:8f:be:81:d2:16:c0:b9:0a:bb:e4:15:91:1f:
ad:7f:89:7c:b0:ab:a6:14:5f:45:ab:0f:6d:23:bd:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:23:60:FA:44:75:71:49:6C:48:7D:30:46:C2:A2:DB:BD:3E:C8
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:3f:7a:cf:02:1c:fa:1d:2d:0e:28:05:08:12:79:4c:91:
ca:6c:55:78:5e:d0:81:c7:e8:3b:16:f1:0a:58:cc:6b:15:3d:
3c:33:92:d9:8c:59:fc:0f:45:e8:b9:20:98:04:93:36:48:d7:
f8:e7:0c:b3:a1:39:6d:cf:94:df:31:a9:c9:66:81:9f:92:ce:
8f:5b:5c:4a:b0:ad:3b:e8:1b:88:88:fa:64:54:88:93:cf:8e:
78:1d:86:e2:1e:ab:d1:05:56:0b:6b:b9:19:0f:66:c1:91:10:
43:04:78:16:d9:63:2b:2e:18:1d:28:ff:93:8b:7f:d1:da:13:
ec:f8:8b:9a:18:53:b6:30:c0:83:1f:2d:46:1a:57:88:bd:9e:
9a:c9:bf:e3:7c:84:98:3f:32:da:8d:d4:a3:6d:0e:66:28:c2:
20:e0:a4:52:79:15:cd:cb:33:44:2f:0b:cb:c7:b7:57:ec:4f:
05:17:9e:19:25:2d:a4:82:12:5f:3d:fb:b7:3d:47:e0:18:61:
a7:a0:de:a7:b7:07:e3:39:9e:46:75:5d:1c:f4:36:c9:18:df:
eb:a0:f9:38:4b:af:93:02:ae:dc:9e:ae:86:68:76:90:fc:b5:
34:15:42:15:86:05:5d:81:9d:bc:c4:ad:31:14:65:4d:ad:05:
ac:87:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:16:23 2025 by rpki-client