Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: syjYtg3jAoPlXkEFOi+3sBRdU4F2SFBpQK4Ys1F6sqo=
Subject key identifier: 5D:60:26:36:61:E0:AB:58:BC:13:FD:4F:9F:E4:B1:21:B6:A6:7A:39
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 0197B70E5022F9C552F96F17A251CAB32F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: 46BLEzJhNBSE3jKSulMr5TdtEPkAE/aAGKPfgxD8I3U=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:50:22:f9:c5:52:f9:6f:17:a2:51:ca:b3:2f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=5d60263661e0ab58bc13fd4f9fe4b121b6a67a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:fe:f6:9f:09:3b:6d:b7:0f:88:1c:60:4f:
08:5a:50:cd:cc:61:f9:a7:e3:8a:d0:d8:8d:63:82:
6a:59:bb:b1:91:7b:60:ea:88:ea:4a:5d:4d:ce:91:
b8:ea:11:3e:60:9d:b9:2a:72:04:4c:c7:5b:5b:ad:
b4:9e:6d:e0:af:84:40:09:b6:d9:3f:05:df:7b:56:
da:b8:9b:fa:8d:00:c7:19:c3:d3:8d:85:ab:6f:ad:
b6:9a:64:66:6c:49:15:fa:93:ab:f6:b9:1b:c6:99:
13:bb:f6:58:04:12:1c:c5:c5:dc:ff:cf:8e:9a:0b:
c8:d9:8c:e5:9d:6b:71:2e:1f:9f:bf:15:4a:d9:e3:
28:60:ee:47:81:e7:b2:35:8e:f2:fd:16:01:cb:79:
fe:b2:66:00:f1:93:0f:ac:6b:18:73:a7:6d:f9:ff:
10:af:f6:d5:9a:fa:33:d9:68:d5:4f:65:29:0b:6d:
c9:ac:1f:ed:0c:1e:7e:96:84:17:a0:73:48:1b:89:
43:3c:bf:49:80:cd:7c:ff:93:b7:95:cd:40:cf:78:
eb:52:52:92:2b:77:25:f4:5c:6d:6d:5e:be:76:83:
ef:da:f5:3e:46:07:75:9d:50:16:85:e0:b2:d4:85:
6b:31:2f:b9:4b:1d:d8:30:0d:e7:da:37:2e:18:76:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:26:36:61:E0:AB:58:BC:13:FD:4F:9F:E4:B1:21:B6:A6:7A:39
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:c4:d3:27:5b:8b:95:fc:57:fc:84:4a:08:9d:43:4c:b3:
55:89:bd:3e:ec:8b:f6:36:1d:ae:49:5a:55:8c:72:10:51:38:
dd:23:2f:a5:61:64:38:9e:b0:15:c6:65:b3:f8:a4:0f:62:b1:
04:42:af:2f:b1:eb:2d:51:8d:68:d3:fc:eb:18:aa:99:83:0d:
38:32:f9:f6:47:50:31:f2:fb:83:af:f0:a1:e6:2d:3c:e7:5c:
aa:cd:b2:13:8b:3f:19:64:d5:da:47:6d:f0:f7:71:e9:19:01:
ce:05:89:25:17:32:b9:07:91:1e:78:82:6e:64:a8:eb:0c:b9:
ca:22:50:d4:74:61:9c:bd:b2:fe:6c:d6:83:39:3e:1e:b3:89:
2c:65:5b:dd:31:5f:db:7e:7f:bd:06:38:00:dc:c2:64:e6:06:
1e:61:5a:4c:4e:70:6b:89:b5:bf:96:68:ea:b3:d2:70:0b:6e:
36:18:1a:00:84:71:5d:73:55:7d:25:e3:07:4d:8d:86:ba:f4:
13:69:0b:67:b2:e6:09:71:c0:da:36:8c:7a:e3:9f:4f:53:ef:
a2:89:58:15:71:62:dc:44:c4:d3:18:21:11:17:ff:a6:8c:8b:
65:71:c5:c1:d7:f8:18:8e:79:0e:98:a9:2b:8b:87:49:ef:a9:
96:d6:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client