Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: atI3M1xY4Q8tvs2MgxO/DAJelyNGW3ZkANCRSpKv590=
Subject key identifier: 1C:41:B2:51:90:00:A3:32:DF:9D:0D:CA:B5:67:39:29:A1:82:E5:24
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0197B7B3056F9B7BA5866FF820299E462663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0E06
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 05wS2za3SVnEDPg2k1txDXqWzdpIz6B/KDQCzvooFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:05:6f:9b:7b:a5:86:6f:f8:20:29:9e:46:26:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=1c41b2519000a332df9d0dcab5673929a182e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:31:e9:71:0e:b7:de:84:b4:39:e9:a0:d3:
23:5e:e6:78:93:0a:83:d2:69:98:74:c7:7f:fd:8f:
a6:ce:fc:05:8a:70:54:82:6a:f1:f7:9a:1f:de:e9:
c0:d7:44:e4:28:fb:4e:48:11:49:d1:7e:9d:d4:d4:
fe:db:bb:2a:d1:10:59:04:21:13:d9:a0:4d:e4:d3:
34:01:6e:b9:c4:66:c7:62:73:b8:8e:13:0d:e7:7c:
1f:8a:4b:84:96:64:5c:b6:88:30:c7:4e:c4:93:f8:
9f:7e:dc:1f:96:93:1a:8c:4c:b7:08:5e:06:42:25:
70:bb:4a:29:58:87:37:47:f7:e9:85:de:10:f3:ce:
f4:bc:e1:cc:12:bb:cf:a8:f9:1b:00:65:0f:63:72:
d4:8e:9f:bd:c3:d3:dc:56:a9:6f:da:a0:81:75:f1:
b6:dd:30:4c:18:b2:08:01:68:ce:b0:57:70:1c:c4:
ac:19:7c:50:9f:fb:4d:10:da:5c:cf:2c:b4:58:f8:
e8:e4:84:f0:6c:ca:34:c3:27:ef:b7:e4:dd:76:33:
d8:d3:42:5a:2b:67:3c:3e:4c:d8:c5:95:ee:f9:7a:
a9:60:ef:b8:26:be:94:d7:ab:02:66:51:47:73:f7:
6d:f6:80:2e:e6:25:4a:b4:ef:7c:04:92:ca:15:a3:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:B2:51:90:00:A3:32:DF:9D:0D:CA:B5:67:39:29:A1:82:E5:24
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:9a:8b:51:ac:ac:42:85:e7:0e:05:2f:43:f1:30:48:62:
c0:34:cb:47:8d:32:04:c7:42:41:26:c6:f0:36:17:a2:c9:f5:
61:1a:90:a0:00:1d:26:09:80:13:6a:a9:26:73:09:ba:96:c9:
f2:51:6e:19:c8:10:5e:48:ab:cc:1f:bf:7e:28:a3:74:4a:85:
ab:d2:a4:32:65:d5:4b:7e:19:31:4c:1b:96:63:78:fd:83:18:
78:cf:b9:af:f4:d3:3a:26:64:78:cf:cc:f5:bb:9b:7b:cd:a7:
49:89:8e:ce:55:49:3e:89:e4:25:55:0a:f7:0d:b8:ee:cf:44:
12:8e:57:97:81:64:7e:11:e8:02:10:0b:a3:97:2b:22:7d:6b:
ae:8e:f9:8c:54:7b:78:ce:1a:43:ad:b5:c5:b7:d8:4d:dd:6a:
77:7a:c3:d3:13:a4:4f:29:7f:ef:03:b1:ca:ee:aa:3f:40:8a:
e4:9b:8f:92:e0:08:47:45:e4:69:57:db:52:e4:3d:69:21:3a:
40:df:5d:23:49:68:40:c0:1b:3f:c8:98:b7:46:d3:fd:ab:fd:
2c:a2:91:a2:7c:1d:75:76:27:d0:51:97:fd:ff:53:bd:eb:bc:
51:7b:2b:fd:5d:35:93:59:63:7a:fe:fe:aa:78:b4:d4:27:78:
1e:b9:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:56 2025 by rpki-client