Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: o49Il7raPI1Tinu2mjeDXheEtGOANSNsd7p6NBGbSXA=
Subject key identifier: 03:11:FD:28:98:C2:D6:CB:31:83:39:C5:7D:45:F7:AC:A1:36:5C:4A
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0197B820FDAE76EE9E42A73EEBFA74D693CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 157B
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: Kpnt/hOsr0Ip7FOCTgYRkVN3diRRF+dWOTVpOLCP19E=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fd:ae:76:ee:9e:42:a7:3e:eb:fa:74:d6:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=0311fd2898c2d6cb318339c57d45f7aca1365c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:40:62:3b:4d:11:67:aa:39:b5:cf:98:ea:
bf:5f:55:6b:10:0c:94:7d:f7:59:14:e4:c1:46:5f:
60:4f:71:94:05:d8:78:ad:59:e8:ea:f2:97:fe:60:
85:5a:33:9f:27:95:a3:f5:c9:85:a7:58:ab:35:95:
2a:20:5b:9f:28:4e:40:08:e1:74:da:d1:2f:ff:7d:
86:7a:27:c3:73:e9:da:d0:df:05:2f:9d:5c:4b:9d:
18:ae:8e:f6:39:5d:02:9a:36:ba:e1:a7:c2:6d:22:
44:c3:57:cf:b7:76:a9:be:61:da:9b:53:2f:c1:6f:
90:83:fd:d0:71:df:33:fe:fd:28:ee:9d:92:30:00:
c3:72:41:a4:e4:d9:c8:3e:67:01:1b:e4:00:84:df:
e8:01:3a:dc:8c:19:a0:a2:58:35:e2:c2:ce:02:36:
86:df:4e:64:2c:44:21:ae:6d:d2:d4:2c:3b:bf:d9:
12:5f:b3:16:9f:e6:fa:95:8a:c9:8b:e7:21:03:84:
6a:72:8e:af:4a:64:32:41:7e:18:96:20:93:9a:70:
27:fa:cd:88:d4:d4:96:a5:80:d8:23:99:ec:8e:bc:
90:14:0d:f9:1d:a8:c9:98:3e:ef:cb:95:3b:42:b2:
0f:8e:96:f1:e9:51:ce:87:2e:f0:22:dc:20:76:8c:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:FD:28:98:C2:D6:CB:31:83:39:C5:7D:45:F7:AC:A1:36:5C:4A
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ae:79:21:86:47:31:46:a3:d5:8c:96:ee:24:f5:a6:9e:df:
1c:3c:f5:96:ee:2c:57:ab:d9:d5:9c:eb:47:59:25:17:33:fc:
08:40:79:91:8c:c5:29:5b:85:3d:c5:49:4b:31:f1:23:00:aa:
a6:ac:da:8c:1d:f1:d1:25:12:43:a0:db:93:e9:a0:47:e8:1b:
7b:18:c9:14:6e:6b:50:77:74:4b:78:85:45:06:8f:ee:51:30:
b3:e2:66:2a:4f:e3:71:e5:ee:74:50:2e:b1:3d:64:38:11:3a:
12:c5:32:d0:d3:a6:13:5b:16:1c:f3:10:db:12:ce:49:8d:27:
26:fb:d6:a2:a7:c6:eb:35:ac:06:ec:60:91:42:1b:2e:a0:65:
43:45:b8:d4:70:92:dc:06:df:49:5e:55:27:92:b7:ec:37:9e:
25:13:91:c1:d5:56:95:aa:14:82:d9:26:48:3a:48:fb:c6:b2:
8b:03:49:12:e9:ac:0d:90:60:bf:f9:5f:9b:50:79:0c:e1:ce:
51:55:9f:bf:49:e8:66:a2:eb:41:c3:9c:ec:bf:b7:0b:3f:c4:
bf:46:4b:95:dc:f9:2f:3f:29:94:52:de:52:d8:07:05:81:da:
56:f3:f8:58:c3:10:e7:cf:36:fe:bc:ed:6a:d1:d1:31:7f:69:
97:0f:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:35 2025 by rpki-client