Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: I3d3JsR2QKx9MPgURVBf882rP56C7LZQPWRtvjr8VLg=
Subject key identifier: D5:52:0C:3C:4E:6A:32:EE:20:A4:49:31:C5:3F:C4:37:48:8B:EB:53
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0197B70E6665E2E4BD1A5A9330938F328C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 151E
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: If/f1BGM/1t0aLqnIjzoSmC81IXeX86XpZvjAq+G6Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:66:65:e2:e4:bd:1a:5a:93:30:93:8f:32:8c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=d5520c3c4e6a32ee20a44931c53fc437488beb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:3d:8d:66:d0:3d:b1:fb:3b:6d:3c:68:0f:
8e:de:80:3e:43:76:f8:84:d5:9f:3b:72:0a:75:61:
74:d0:af:b4:60:fd:b4:3a:93:48:9b:ab:63:bc:de:
2e:14:ac:ee:69:f8:fb:76:66:e4:a3:6b:08:92:7c:
fd:31:94:7d:11:62:4e:52:5d:5a:38:fb:0c:c6:32:
07:c9:08:9b:f6:56:a2:44:d4:9a:57:15:97:66:e6:
9c:11:fe:5d:90:16:5a:d9:70:5a:29:c2:ed:0a:44:
57:d0:f9:63:b0:2b:26:88:72:07:d6:5a:cf:75:a4:
78:72:73:95:1f:97:4c:18:24:e6:8f:14:aa:dd:be:
09:86:9c:7b:72:68:8f:b9:ce:1c:25:6a:36:73:a1:
25:19:c4:41:43:51:d2:a2:fa:fe:6d:a5:35:fb:30:
ba:45:cb:be:6e:b2:4b:04:75:e7:1b:b9:52:ec:f9:
38:a8:09:92:52:e3:af:de:03:fd:18:8d:21:28:58:
66:15:45:ba:f2:09:00:08:6b:9c:c2:c0:8c:37:fc:
21:ce:df:b0:50:83:86:f7:2b:ee:ab:be:b8:a9:cc:
53:17:04:27:cf:19:73:75:48:36:70:c6:fc:f9:78:
fc:9c:9c:af:5b:d6:3b:07:d6:2d:cf:cf:2e:1d:9a:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:0C:3C:4E:6A:32:EE:20:A4:49:31:C5:3F:C4:37:48:8B:EB:53
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:7a:3f:8f:31:bc:2f:60:15:4b:ed:39:05:77:bf:a0:13:
06:27:3c:64:2d:78:77:99:53:22:1e:48:90:af:8c:90:11:39:
11:31:20:d7:9f:40:b2:b7:e6:df:7b:db:49:31:af:b2:c5:ea:
a4:21:be:2e:45:b1:77:34:ef:49:a1:8e:7f:dd:ca:be:30:ca:
76:44:6d:73:6b:33:de:89:67:0d:7d:c7:71:27:ab:b4:50:a7:
26:f2:01:ca:02:e0:43:db:6c:7e:da:6a:fb:8b:0b:ae:5a:c1:
6f:d6:69:c8:ad:da:29:b4:db:6a:d6:93:8b:35:05:6b:ff:bf:
e6:57:36:c8:ee:47:4a:b2:bb:54:2a:a2:19:33:22:a6:cb:da:
bd:3e:22:07:95:a8:45:6e:f0:84:0d:da:9c:0f:b2:12:4a:29:
56:69:22:3f:ca:ba:fd:4f:f2:90:da:2f:b9:ce:7c:e9:69:79:
cd:58:25:8c:f0:4a:4d:1c:0b:15:65:dc:e2:63:de:87:f9:69:
ec:c9:6f:21:f4:13:5e:a1:9d:20:2e:48:34:21:8f:1c:6b:b0:
15:26:21:f5:81:9f:42:b2:3e:43:1e:19:bf:f1:80:dd:f5:44:
34:ef:6e:3b:fe:58:fd:06:c8:75:11:2c:d7:77:0b:ce:43:5f:
8a:f3:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:22 2025 by rpki-client