Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: FoXdChDajndqIrVKImJFMwvPV/f+hy3v+xwnNUgL6cM=
Subject key identifier: 51:8F:7F:27:1E:58:37:FA:5F:85:0F:69:F2:20:07:55:13:05:C1:08
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 0197B77CC7F8D36873D4B999F306E2EFD7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 14E3
Signing time: Sat 28 Jun 2025 17:01:37 +0000
Manifest this update: Sat 28 Jun 2025 17:01:37 +0000
Manifest next update: Sun 29 Jun 2025 17:01:37 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: mEy06OIbavx3DFW1HHsdFow7JQHFt4gM6wcd0RGIegA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c7:f8:d3:68:73:d4:b9:99:f3:06:e2:ef:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Jun 28 17:01:37 2025 GMT
Not After : Jun 29 17:01:37 2025 GMT
Subject: CN=518f7f271e5837fa5f850f69f22007551305c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:02:01:77:e3:28:2a:2e:c9:ec:57:7d:5a:
7b:01:a4:81:7e:44:0f:40:af:7b:57:63:6b:24:ba:
94:4c:1b:57:bf:cf:75:d6:cb:ed:8a:20:34:a3:07:
76:33:00:f6:13:6a:07:38:ad:3b:04:54:c8:aa:68:
4c:42:9e:96:9f:c3:e4:dc:d3:22:ea:90:e3:69:ac:
82:cf:1c:ee:39:51:f9:14:97:3c:bf:67:6e:66:76:
48:4d:af:e1:fb:8d:46:cf:78:5f:97:61:7c:fc:30:
5c:82:b2:d4:41:97:97:ed:bd:f1:a6:9d:ef:10:a5:
a2:34:ec:33:4b:f3:c2:b8:5c:82:72:47:66:00:74:
32:b5:ed:5b:ab:a7:82:90:1b:6d:5d:f2:90:78:34:
ce:82:75:1e:b7:8e:36:24:88:41:52:8e:9d:7f:82:
87:31:1a:66:ff:89:44:b4:0a:7f:a7:32:d6:9f:94:
7d:f0:d8:ec:e6:32:ca:53:36:f1:66:ea:8d:9f:67:
18:d8:3c:f5:75:80:dc:d4:bd:b5:26:d0:73:c3:44:
c4:7e:81:fc:da:b8:86:f2:eb:95:c0:44:c5:bf:5c:
1c:24:ae:6e:e9:ca:d5:0e:0e:1f:bc:b7:18:66:86:
24:7d:fe:03:7e:a1:f9:03:06:f9:eb:b5:c6:8c:f9:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:7F:27:1E:58:37:FA:5F:85:0F:69:F2:20:07:55:13:05:C1:08
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:64:4f:37:d0:73:1a:bd:ef:12:83:43:bd:6a:e1:c6:6c:8a:
14:ec:11:b4:da:39:b3:c1:32:87:83:e8:94:a9:cd:09:9e:ff:
d5:c1:01:f3:99:74:f1:a7:27:1d:9a:0a:e1:55:3e:10:6f:6b:
88:43:05:19:c4:e2:47:80:b8:be:15:e6:e0:13:0b:38:1f:2b:
e4:9d:53:18:c3:d7:f1:d5:a4:9d:a5:05:7d:a2:78:b3:22:94:
c7:5c:5d:36:a7:03:7e:5d:43:2f:d9:04:8b:b5:91:ab:57:50:
a4:ba:5f:ec:15:50:83:ed:81:70:7d:57:93:32:18:ae:d8:90:
86:6e:8c:2d:2f:1a:94:5b:25:b4:f2:36:1e:2a:eb:e1:44:c6:
79:74:be:45:5d:13:38:61:a8:83:ad:f8:de:7e:35:8a:07:36:
38:bb:63:d0:27:ae:68:f0:b3:8b:ef:50:9b:24:e2:18:9d:31:
09:f6:bd:27:89:d0:92:be:45:85:25:5f:02:ff:e7:b4:06:15:
65:13:9c:d0:3a:64:40:58:ad:a2:d4:d8:53:af:ef:03:ac:60:
5a:4a:52:dc:c6:be:d4:4e:28:ee:cc:bf:77:d7:f6:e9:9a:7f:
43:37:bb:2a:69:10:c5:b5:40:b9:9e:86:1b:1f:2d:9b:99:f7:
2e:a3:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:32 2025 by rpki-client