Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: kZGYoU1DGlWWYx3FP66UIaG4OEUSEJrvOq5JBaQ9BuI=
Subject key identifier: C3:34:74:48:83:B2:3D:62:F1:F7:A5:69:7B:3A:1E:1A:FB:87:69:F6
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 0197B74539B83E337B5673E52BADFA51739A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 04DB
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: 1vcqs/ABSBgdjAIDIeSfuwm1IOOLIytT01KFcFuU2co=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:39:b8:3e:33:7b:56:73:e5:2b:ad:fa:51:73:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=c334744883b23d62f1f7a5697b3a1e1afb8769f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:88:3d:8d:89:11:10:cb:0a:26:1a:c5:d4:
66:aa:f5:a1:f1:4f:99:78:fb:8b:a5:65:d2:fd:b1:
d2:dd:93:c2:5c:a7:5c:25:b5:e6:bd:b9:01:06:4f:
36:dc:09:73:e8:a3:26:9d:f6:9a:37:f8:01:89:19:
e9:e5:3a:d3:03:32:c1:4f:6f:93:08:97:67:c1:32:
49:25:fd:36:f8:3f:14:51:3b:4d:7e:b7:24:89:da:
99:ae:0a:c3:68:d6:57:e7:ce:13:f1:4f:a8:72:70:
c3:8e:40:22:e3:23:4f:a2:b3:6a:77:2a:88:51:23:
5d:3d:ce:0f:d8:0b:73:bd:14:70:e5:61:c9:66:d8:
ad:96:59:92:80:6a:38:57:a3:ef:85:d8:7e:66:d5:
f4:ae:16:b3:e1:95:85:3a:db:f9:f5:57:73:82:5e:
dd:a1:fb:d5:d6:50:71:2b:a4:f6:da:6b:1c:3e:e9:
76:ef:c3:0d:df:b0:65:e8:dd:8f:4e:02:7d:24:13:
6f:3a:50:15:e3:7b:88:ed:d8:4e:6e:7c:05:a7:ca:
fb:43:30:32:ff:96:d8:96:65:62:ce:df:d8:25:d6:
33:c9:ab:86:38:5a:7b:dd:8b:bc:4d:ba:f7:33:21:
a3:0e:d9:2d:34:1f:99:dc:36:f4:3a:7f:da:21:33:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:74:48:83:B2:3D:62:F1:F7:A5:69:7B:3A:1E:1A:FB:87:69:F6
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:36:a0:f2:42:11:47:06:cb:ca:86:22:75:03:ee:d2:e0:
cc:b5:5d:1f:6e:24:31:1a:ed:7f:c3:af:27:11:fa:1a:78:6f:
d3:8e:ae:83:2a:28:1a:95:73:9a:79:63:9d:7f:5c:10:2b:25:
cc:f0:3d:e4:1d:79:c0:93:f5:b8:6e:0b:7c:b8:f6:55:fb:c9:
b1:0e:81:9d:53:cd:c0:27:a7:2d:76:67:ef:a6:f2:ed:92:31:
00:a8:db:8e:a6:c8:42:72:a0:7d:62:b7:e2:15:b1:81:1d:bf:
a8:ea:d3:35:f6:90:69:01:e2:48:dd:a6:e9:1c:ec:21:db:35:
46:6d:b2:a9:10:2e:63:cd:33:f3:ce:33:f2:27:a6:90:8d:0d:
34:52:cd:9b:fb:5a:72:54:2b:c6:05:85:91:c2:04:a4:89:e2:
26:46:55:44:db:b0:79:8c:70:60:97:35:bc:8f:f5:d8:22:b7:
10:80:eb:6c:a3:2a:46:d7:0c:60:fd:af:92:f8:3b:ff:fb:52:
e3:60:06:94:d6:8f:8c:90:56:29:10:f9:3a:fb:77:34:38:82:
7a:12:f4:29:b2:a5:1e:f8:93:27:df:e4:f4:60:e4:cb:5d:97:
71:36:cb:83:1d:d7:4f:69:b5:2a:4c:47:78:91:1b:96:c8:2d:
47:e8:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:10 2025 by rpki-client