Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: FOc0pc9TWtlj2O65y8db9MbYt7XVgPmZwR+jyAaA5fU=
Subject key identifier: 9D:7F:71:72:EC:B9:97:6B:14:71:29:0D:83:58:A9:EB:43:D6:C2:8C
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 0197B6A0DD0921E4F3888B0382B4C16682B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: NCA9mZ8B5jSzorIhVi9FBH91+xAHafBiIh5CmWm2paQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:dd:09:21:e4:f3:88:8b:03:82:b4:c1:66:82:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=9d7f7172ecb9976b1471290d8358a9eb43d6c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:77:e6:15:48:68:41:61:f9:ab:74:39:f0:
0b:bd:fc:d8:45:b6:88:22:9e:4c:90:84:70:50:9b:
72:44:7e:31:b4:c3:80:30:8a:4f:e0:f8:9c:cd:31:
6d:80:99:12:f0:d7:72:52:9c:c4:15:4f:b5:e3:44:
c4:86:4c:3d:80:cd:4f:ac:4b:6b:58:58:34:cb:58:
36:ed:8d:1d:e7:99:a1:3b:8b:ea:bd:e8:5e:4a:d3:
c0:b7:4e:ce:9b:99:dc:2b:87:d1:45:8f:8a:f7:dd:
26:22:de:2a:b9:42:9b:ac:34:8b:fe:bf:be:70:2e:
86:3f:49:4f:45:e7:0d:5e:7b:0e:0f:8d:c6:10:ec:
bf:c6:4f:2c:40:87:1a:ee:f4:70:aa:c6:50:fb:10:
1c:0c:27:8a:6a:d7:00:a8:56:45:58:14:6d:2d:05:
37:15:6e:5e:73:02:1c:a0:4b:45:6a:b5:45:7a:b0:
0b:72:30:a2:e9:5b:0a:19:5e:f1:87:b8:f4:5c:e9:
ce:5b:7d:0c:89:a3:29:c7:0c:b4:e0:7e:98:20:39:
a0:51:f0:b9:b1:43:bc:65:6e:b0:2b:b4:30:c3:e9:
de:e8:0a:d6:f9:70:84:97:c9:7e:be:80:33:25:b4:
4c:46:98:d1:14:9d:0c:bd:92:06:1e:82:55:5a:28:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:71:72:EC:B9:97:6B:14:71:29:0D:83:58:A9:EB:43:D6:C2:8C
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:2b:ee:7f:12:1b:7d:dc:b1:42:b6:bd:99:19:86:c3:e2:
ef:4d:65:16:7d:13:24:eb:d4:a8:3f:ce:60:68:f2:28:bd:4c:
3d:b1:64:c1:75:74:ee:86:c9:59:d4:ad:f1:9c:65:69:d2:b5:
c0:a7:dc:c9:8d:d3:78:ac:65:9b:6a:6b:86:c9:cb:2e:72:94:
a3:46:56:03:f3:32:b7:30:b8:cd:54:0b:da:db:6c:10:05:73:
22:e8:f4:2f:b0:3c:17:5e:fa:b8:f0:6c:7d:e5:fa:10:60:6d:
53:ae:a7:c6:1f:63:dd:4f:33:7d:3d:e9:41:51:2b:69:35:93:
5c:52:a5:59:a2:df:43:c2:e5:95:59:8c:d0:4e:68:36:18:cc:
09:20:9b:0f:f8:4f:97:03:e3:3b:5b:33:31:0a:21:d7:21:09:
9a:e4:f9:8e:67:9c:68:96:05:bf:6f:fc:a4:37:36:57:5f:e4:
7e:6e:34:72:b6:83:a9:45:46:7c:58:a1:6d:1c:c5:bc:af:8c:
b0:dc:6a:f6:93:46:37:a8:6a:3b:9d:26:50:81:15:90:9d:d7:
a2:88:a1:cb:6e:d9:d9:49:53:f0:93:b3:9d:7f:88:fe:5c:52:
19:06:ed:8d:86:99:84:05:ba:02:28:31:96:86:75:18:78:ea:
9b:ef:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:45 2025 by rpki-client