Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: 64GbKWl5SrzQ5BQIoHfYsoWnJ9pmtP4sys9LBvKkNls=
Subject key identifier: 8C:F9:EE:56:61:47:79:13:2B:65:73:A8:36:44:7F:AB:5B:53:78:C5
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0197BA7E4208C26816C3873D03EE3C825175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 15CD
Signing time: Sun 29 Jun 2025 07:02:05 +0000
Manifest this update: Sun 29 Jun 2025 07:02:05 +0000
Manifest next update: Mon 30 Jun 2025 07:02:05 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: tNF4jze/+NEbgJkTxRrWrvqXaQKjqTk0Z2D39q2TFMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:42:08:c2:68:16:c3:87:3d:03:ee:3c:82:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jun 29 07:02:05 2025 GMT
Not After : Jun 30 07:02:05 2025 GMT
Subject: CN=8cf9ee56614779132b6573a836447fab5b5378c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:f0:20:4c:f5:1e:5e:4c:7b:ed:50:36:09:
bf:8d:98:f7:54:36:e5:fb:16:41:fd:cc:5b:44:53:
ae:ae:c3:c5:f6:0d:c3:e7:a5:5f:b1:47:2f:a6:18:
79:6c:78:f7:fb:2c:99:4e:b4:58:62:1a:9e:37:61:
35:50:6b:fe:74:1d:33:95:54:4c:47:12:76:76:9c:
b6:66:4e:97:6f:5b:95:92:47:77:1f:e1:d1:12:e5:
74:09:af:0e:5d:fb:c0:41:2a:66:ed:99:af:93:73:
25:0b:56:b4:64:b3:54:f7:13:7e:93:7d:1c:26:4b:
24:59:39:a3:00:89:19:a4:fc:20:41:85:8c:54:ad:
3a:a6:6f:6a:21:8e:4b:5c:12:b6:8f:19:9b:0b:65:
49:3d:81:c6:68:16:38:48:f7:11:90:d5:d6:b7:dd:
f5:2b:43:0e:8c:57:e9:24:ab:42:a4:0a:c2:e7:93:
9a:7b:39:92:96:45:93:72:09:11:19:e2:a2:bd:d8:
52:b9:3a:23:02:65:a0:0b:86:5e:56:c5:cd:4f:b2:
3e:f8:2a:93:7e:0f:ae:6f:75:f0:49:33:ae:7b:a5:
0b:96:52:ba:11:be:9e:f5:0a:9e:90:7f:1c:0c:8a:
ee:71:dd:03:6e:5d:3a:2f:43:42:05:6b:64:96:fc:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:EE:56:61:47:79:13:2B:65:73:A8:36:44:7F:AB:5B:53:78:C5
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:91:46:fd:96:f5:18:f3:40:04:64:c7:4a:2d:ab:b1:4c:bc:
7f:d9:fc:40:d3:55:27:d1:6b:66:42:f4:c2:f3:89:c9:a9:e0:
f4:a1:4a:a1:3c:67:6b:46:d5:1a:1b:bb:ba:df:ce:ce:45:b6:
40:d8:4c:91:04:f0:84:b3:c4:50:6d:02:5f:08:13:d9:62:6a:
ce:30:60:e0:eb:fd:fd:35:d1:38:94:c2:f4:f9:c6:65:09:de:
99:ce:af:c2:f8:42:e6:b2:0e:7f:ce:a3:46:15:9e:91:cb:29:
4a:e0:49:44:33:b4:87:bc:73:3b:6a:86:7d:f2:e2:77:45:84:
40:cc:f9:5d:82:58:99:cc:f0:fe:05:07:7d:87:37:b2:f1:f4:
5d:c6:a9:a4:2f:05:ea:fc:ae:0c:bf:15:6e:2b:f7:19:bc:0d:
d0:ad:ca:52:cd:b0:48:d7:86:66:29:8c:4a:34:48:4d:1a:23:
29:de:78:97:18:aa:87:0c:a6:db:19:f3:26:c7:6e:b4:c2:3c:
9a:7c:a9:3a:30:41:85:a2:fe:5f:c7:3e:9e:e3:af:14:0c:1f:
53:da:d8:17:93:3f:c6:a4:58:d6:95:38:30:78:e8:95:26:a5:
8d:22:35:7a:92:ee:d9:4b:b4:ef:5e:21:c6:2d:38:3e:c6:06:
1b:f9:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:53 2025 by rpki-client