Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 14jIvldrZ5dfIBq1Ms7ow5wTL6jL8tzDR0rupJykZXk=
Subject key identifier: 41:1A:8C:DD:F1:25:C4:AE:15:71:57:B0:79:79:C4:E0:C9:37:2E:CA
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 0197B70E4E8D89CECCD36101AAFF609704F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: Q4h2Zo1QG/7YFoEKeLXuAtP04/w0+XdyO7eLR6JqyPU=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:8d:89:ce:cc:d3:61:01:aa:ff:60:97:04:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=411a8cddf125c4ae157157b07979c4e0c9372eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:52:55:4f:20:46:34:89:9f:26:f2:06:b1:
21:1e:88:81:16:16:28:5e:e3:82:dc:f9:7c:95:17:
0f:eb:55:82:12:0e:ab:15:d1:74:70:c0:1d:54:84:
67:27:12:5c:99:bc:7c:65:fb:6f:31:1a:17:b8:6c:
9b:81:ce:0a:7e:1d:7b:b7:d1:5c:fe:4b:c7:63:f8:
b1:c0:17:6b:3a:a6:e3:22:07:74:da:39:90:9d:86:
f5:6e:49:fa:be:9f:2b:41:77:4b:4f:0d:03:0f:72:
d9:3e:72:06:61:e6:cd:f1:10:3e:47:47:25:fe:89:
bf:1b:cb:9c:03:7f:c6:34:d7:6a:26:90:e3:a6:7a:
81:70:89:47:9e:57:c9:08:37:87:b6:72:c2:dc:2a:
1a:55:27:1c:23:2b:98:df:ec:2d:82:01:2a:ac:bb:
52:5c:ec:2f:39:82:1c:e6:6f:6c:8f:f8:fc:7a:7c:
2a:52:1b:9d:1e:1a:f8:b0:35:8e:a9:5d:51:54:2e:
72:f6:19:a2:28:37:27:8f:bf:6f:53:c1:2d:87:e7:
13:63:55:eb:ff:f8:68:d7:e0:0f:28:53:80:ee:81:
9d:e2:b8:18:50:f1:81:4b:ca:0e:47:b0:7e:5c:2f:
2e:d2:8b:71:56:12:e6:1a:58:d0:eb:0a:c4:e5:47:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:8C:DD:F1:25:C4:AE:15:71:57:B0:79:79:C4:E0:C9:37:2E:CA
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:47:b2:e4:af:f1:49:1f:77:65:b6:8c:5b:02:58:ef:95:
b3:c2:81:1f:bc:be:30:36:da:44:ec:de:8c:78:d8:f7:d9:64:
92:d3:25:fc:0f:98:f4:00:03:29:f3:89:4c:52:b9:5a:57:f3:
75:2c:bd:3a:ca:b8:5d:90:cf:6d:09:c3:21:b4:82:1b:83:8a:
06:bc:9e:77:b6:cf:0b:d2:42:a8:a2:9f:5a:19:5d:45:be:79:
de:3a:9c:7a:f6:be:e7:4e:64:4e:fd:04:e0:99:cd:1c:8c:c8:
c1:49:e6:37:ec:ee:c8:71:e5:15:34:a5:ad:25:11:4b:7d:fd:
9e:f8:24:84:37:be:fa:5f:74:20:f5:51:ae:d0:39:ce:fb:61:
76:84:d2:f1:ca:cd:fa:88:52:3c:ef:78:d8:d8:b0:92:07:13:
14:ce:57:3d:4f:94:f8:01:87:9f:33:db:44:63:fc:1d:b2:01:
01:5e:4e:cb:11:5a:e7:eb:66:7d:4b:b5:22:55:94:db:ae:fc:
ed:08:d9:21:e2:4d:7c:a9:a2:d5:82:5a:36:8e:ca:00:32:a0:
ce:43:de:45:89:c6:e4:a2:fe:41:67:97:b6:a5:3e:22:55:f2:
46:90:8c:9c:d6:e6:8d:4d:f4:1f:34:4a:05:59:85:a2:40:e7:
21:c0:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:04 2025 by rpki-client