Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: z8DYob2WMLZvtaMlvz2AL7RGF2M7e/xku1OoyoULeOw=
Subject key identifier: 9E:A6:8D:7A:44:37:65:DE:1B:92:C4:3C:D9:A5:35:E6:FE:FE:5E:9D
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 0197B77C928E2CCD1FA505A7D8D697C8A191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1278
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: CByL5omMyr8yAnSnMQwBHPJoZjxh0c2+9XKCHK4rDYA=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:92:8e:2c:cd:1f:a5:05:a7:d8:d6:97:c8:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=9ea68d7a443765de1b92c43cd9a535e6fefe5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:16:64:4e:1a:7a:1e:8d:64:17:b4:9c:81:
41:b3:4e:62:ce:2d:24:ce:f8:ea:e3:42:25:bf:81:
37:6c:77:97:ff:59:9c:b3:21:a8:23:30:38:9e:84:
e8:77:ac:81:f4:ce:d9:ae:02:4f:9a:76:15:0b:32:
65:ee:c1:a1:f2:18:a8:3f:dc:e5:28:2f:16:31:62:
b2:27:c3:26:cb:21:45:cb:52:83:14:8b:f1:40:4d:
f5:35:d4:1f:5d:9e:88:2f:40:67:d8:a3:8d:4a:3b:
07:e8:69:ad:d4:86:1f:10:c6:41:35:b2:dd:26:13:
ee:9e:71:76:ae:77:80:3f:c7:16:d1:34:8f:cb:85:
08:53:c4:e3:ba:97:07:bf:45:41:6f:b2:cd:40:fe:
89:3f:8e:3e:87:11:f1:7c:9a:fb:74:38:f9:42:a9:
40:51:5c:ed:8f:f1:f9:72:a4:13:7b:f6:e6:46:54:
0e:1f:46:e6:af:58:58:b4:e1:64:b9:0d:7f:e0:8f:
59:cc:8e:25:64:03:13:c2:dd:be:ca:2b:30:13:9e:
e6:c2:36:8b:a4:41:db:3e:8e:6d:0b:ac:78:54:64:
a1:30:f9:03:4a:06:4a:2c:00:32:db:a0:d5:54:11:
85:51:c4:ac:5e:12:e9:5a:a3:15:f5:e0:22:f1:17:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:8D:7A:44:37:65:DE:1B:92:C4:3C:D9:A5:35:E6:FE:FE:5E:9D
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8f:0a:09:74:08:83:01:0b:8b:84:93:39:d6:33:ae:df:1c:
73:57:e4:e6:0b:32:f0:21:6c:b5:23:21:ef:f5:1d:06:a3:d8:
4b:07:99:0d:59:26:8a:7c:65:87:1d:61:28:80:53:82:d5:ab:
23:5d:ba:d7:c0:d4:c4:da:92:63:e1:9d:b2:e2:64:2f:79:16:
9f:dc:28:ca:1d:6d:20:f3:32:4a:56:7c:37:ac:b1:c5:e8:28:
a2:23:96:be:ce:83:1b:cc:4d:6f:e4:76:c3:2e:0b:b7:02:d3:
87:1c:b8:6a:7c:c7:c5:5a:6d:23:51:19:c9:0c:e1:37:b8:4c:
ca:40:0d:c2:4c:72:ae:b2:6c:52:5a:23:6b:d8:9b:8f:25:0b:
a7:4f:09:99:99:22:48:f5:2d:a0:b4:5a:2a:54:19:bd:a8:98:
1f:ee:d0:2b:96:76:44:8b:fc:61:d3:6b:ea:43:c0:71:d4:be:
33:ef:91:fc:79:a0:91:3e:51:5d:9e:55:21:f8:26:9a:84:a1:
c9:1f:69:9d:4b:23:4e:bb:8d:28:c6:eb:c3:22:8e:61:2f:e6:
89:36:08:f4:8f:5d:cf:83:90:96:27:17:e7:cd:f9:84:5f:d3:
96:d9:12:16:8f:07:be:fa:79:3c:8d:bf:21:a3:7d:bb:ba:d7:
b3:4e:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client