
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: xufF0KC54I2K2kT834fyCbgJTjee5Lvo1euCXjxMTMY=
Subject key identifier: 81:CC:82:B2:C8:0D:05:22:69:A3:F2:2D:0E:1A:BF:B2:07:56:0E:F1
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 0197B77BF6CE3E60ACBE4B14516E0E3AF337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: ivb+zpvfx2d86ZnuxFaYYDIXa8VMfXjS5wvOs/H8uwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f6:ce:3e:60:ac:be:4b:14:51:6e:0e:3a:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=81cc82b2c80d052269a3f22d0e1abfb207560ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:7b:05:00:2e:0e:21:74:f3:b7:61:e8:71:
2c:34:08:e4:54:0e:b9:61:d7:04:e7:9f:a7:1e:e2:
67:28:2b:1b:63:aa:3a:01:62:dc:4f:92:9e:7b:81:
3a:4c:1a:6d:b5:da:c7:78:eb:97:e1:ac:ae:60:e9:
b8:61:44:0a:f3:4d:f7:1b:b7:79:57:88:e7:f1:22:
1b:91:9a:e9:fb:23:b2:24:fe:41:ba:e4:f9:56:b1:
40:14:c6:11:45:53:95:98:99:a3:c0:1c:b4:14:db:
f9:75:92:64:5a:e4:16:16:40:e7:c5:95:28:b5:ba:
60:dc:18:89:a0:83:29:f0:2c:d8:ff:4c:48:ad:b9:
94:29:dc:33:93:95:6d:dd:02:6e:d9:ce:05:cc:aa:
fa:b7:4e:c3:4b:df:1b:8a:a1:08:02:d6:6f:84:bf:
2e:c6:1b:10:c7:0d:56:54:4a:3c:bf:18:ce:91:c9:
19:6b:ce:73:39:63:3f:e0:9c:52:8f:b5:8b:c3:8c:
17:48:91:61:c5:04:33:af:8e:68:3e:cb:1d:79:ed:
b6:ea:78:6a:db:1b:dc:d6:90:9d:0e:77:33:89:fb:
15:69:08:9b:06:23:89:43:39:dc:68:19:99:06:fa:
6e:a1:66:d6:a7:51:d3:c1:8e:92:04:f0:6c:d6:ad:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:82:B2:C8:0D:05:22:69:A3:F2:2D:0E:1A:BF:B2:07:56:0E:F1
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cb:ec:af:db:5a:31:07:58:54:73:40:de:c9:d6:ab:a7:64:
14:b9:5b:2b:d7:7a:a2:96:47:c6:9c:c4:c5:48:6b:56:c2:e4:
f9:3d:83:27:15:20:05:9d:fa:49:34:18:17:20:6e:9a:05:b9:
1e:a2:ba:92:e2:17:72:e8:39:d3:38:c6:bd:81:de:30:c5:80:
e1:8d:f6:e5:b2:a8:5a:6b:03:e2:bf:23:ae:41:1f:97:80:3a:
c1:16:33:c5:07:7e:89:82:a6:77:3c:e1:f4:62:86:67:2c:c8:
89:32:08:b0:19:44:9f:74:86:75:50:0c:b5:d5:3e:d6:f5:37:
33:5c:1b:4a:cf:3f:78:9e:cd:c4:d1:ca:8e:8f:ed:46:f4:04:
d8:a9:45:35:95:e9:d6:55:17:7a:f0:e6:16:40:16:24:2f:0a:
80:66:35:f5:83:e4:76:95:1f:00:06:00:82:dd:7d:ed:cd:ac:
be:d1:2e:c5:e1:cb:59:3e:d0:52:95:c4:ed:06:6b:e5:fc:49:
d2:29:ce:0b:3d:ed:7c:42:ba:fc:ba:be:9f:c1:09:a5:c1:dc:
e7:85:46:85:52:75:c6:c7:8c:df:c1:cf:09:11:39:50:22:b1:
4d:08:71:23:ae:44:83:67:33:15:c0:7f:7b:52:f8:5a:13:57:
c6:31:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:38 2025 by rpki-client