Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: dswM0b5Lg6VrqmUDnboiu+ykcY97bbrXXXNO2g7XnfM=
Subject key identifier: 61:CF:54:19:86:18:F3:B6:EE:5F:1C:4A:82:B5:CE:FE:27:93:D9:BD
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0197C0B649BD4D95EBEE99F7BF366D85E125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0ADC
Signing time: Mon 30 Jun 2025 12:01:01 +0000
Manifest this update: Mon 30 Jun 2025 12:01:01 +0000
Manifest next update: Tue 01 Jul 2025 12:01:01 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: Dp6DiOcoFDWbbfapBjLSxrgVSPyH8lWPA6aCXlC55w4=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:49:bd:4d:95:eb:ee:99:f7:bf:36:6d:85:e1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jun 30 12:01:01 2025 GMT
Not After : Jul 1 12:01:01 2025 GMT
Subject: CN=61cf54198618f3b6ee5f1c4a82b5cefe2793d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:af:d9:6f:e8:fd:73:9f:df:7b:9d:82:b6:
72:f4:7d:b3:05:e3:08:dc:bd:8e:ed:19:9e:23:0e:
25:3f:76:5c:d4:cd:4c:62:9e:2b:8d:ba:3a:0f:c1:
bb:70:6d:73:e8:03:62:21:42:29:eb:a2:34:9a:1e:
a0:f2:4d:f8:96:67:47:0d:86:54:de:f0:cc:bd:1c:
f7:34:d5:3d:69:68:8c:aa:ab:66:88:3c:56:33:24:
43:12:03:df:e0:46:ff:89:5a:a9:77:3b:dc:34:26:
7a:56:00:12:f4:22:70:ae:e8:67:04:29:10:d1:22:
e2:b1:00:b6:c5:cb:86:64:6c:69:c7:a4:44:f1:44:
6c:b7:b0:86:60:6c:c8:87:76:67:eb:a8:61:98:3b:
ee:95:e2:08:3b:c4:8b:f6:d9:26:c6:03:4c:9e:91:
e1:58:ed:b4:7f:a9:8c:1f:fe:59:78:8b:ce:f1:0f:
fa:dc:c3:6e:9e:78:ad:be:fe:87:d5:b0:18:e0:62:
04:25:0d:c6:35:0c:09:21:8a:8a:cd:1b:c1:77:d1:
09:6f:16:27:da:03:5a:1b:c0:23:13:39:53:f8:d3:
ab:86:19:ef:2b:57:c9:53:ca:7a:9f:24:66:ac:4a:
21:0d:a9:31:23:08:7d:09:e7:0c:62:41:3f:7d:4b:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:54:19:86:18:F3:B6:EE:5F:1C:4A:82:B5:CE:FE:27:93:D9:BD
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:47:11:d9:a2:fa:25:c6:d2:c5:40:9a:f2:e9:5f:72:95:74:
6b:eb:0f:78:42:82:bb:a4:e5:2e:ee:3f:ba:ce:0f:a9:72:13:
28:aa:4e:a4:d9:57:09:e2:14:6e:dd:00:da:36:e4:75:5a:cb:
df:44:2b:21:1e:3c:ea:0c:d3:81:91:65:fe:f1:7c:9b:ee:73:
cc:01:e0:6c:51:65:53:1e:ba:52:49:f6:9a:bf:0c:d3:46:12:
ce:74:84:f1:f8:2d:41:39:fb:16:38:99:0f:18:7a:1f:58:fe:
6e:f4:06:cf:f7:2b:58:74:eb:f9:05:91:22:ee:b5:34:fe:e6:
58:53:66:ff:3c:0b:67:f7:25:40:82:45:4c:79:e8:2f:1c:24:
66:d6:30:24:81:68:e3:6c:79:49:f1:cf:63:0e:9f:d0:d0:4c:
df:b3:6f:ca:a6:0c:14:fa:1f:1c:dd:a4:2b:1e:c6:99:ff:c2:
85:c3:6c:cc:01:be:19:09:0b:b6:4d:50:64:a5:96:76:fc:65:
8e:a3:99:4a:7e:a4:a0:16:8a:6e:2d:17:47:15:28:fd:70:a7:
98:4b:57:90:5d:d7:34:87:e1:a4:3b:53:93:15:51:13:c9:3f:
99:9d:7f:2f:f5:e0:86:61:db:cd:2b:5e:b4:8a:ac:34:df:ae:
4b:e6:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:50:11 2025 by rpki-client