Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: IIPrkgFBDYj+MbJstm1YkhsnHTeUpwgtZ1wDQXNkTMs=
Subject key identifier: CC:88:59:5C:3B:6B:E2:BD:CF:28:3A:CE:7E:5A:58:0D:E6:0E:91:AB
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0197B820D8742C4C3E38062624D9510E218C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: KOqAjf1fXncZ3fQjhZTuFYY5zN4mdXWopbzr2xK+ENE=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d8:74:2c:4c:3e:38:06:26:24:d9:51:0e:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=cc88595c3b6be2bdcf283ace7e5a580de60e91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:59:50:c8:e5:66:76:ba:ca:6d:92:7c:e2:
ca:5d:82:38:cf:99:68:2a:66:08:9a:b0:5b:3e:5b:
0e:47:c0:2e:b0:5f:8b:25:33:e7:c8:1b:aa:aa:44:
29:a5:58:f1:f9:68:6f:ab:35:be:60:e8:87:97:28:
27:cb:96:14:48:b7:da:03:00:30:df:4f:ff:c7:45:
82:2f:aa:78:a2:08:1f:6d:79:0a:21:49:06:c7:5d:
5f:be:49:54:8d:56:b0:ae:d7:9f:05:ad:ae:fe:b2:
71:59:98:be:69:ed:3d:f5:cd:8b:3b:d7:e2:f5:cd:
f3:e8:9e:7f:ee:63:1e:13:a0:45:44:f0:46:64:df:
bd:cf:9c:ef:68:78:c3:a8:93:a3:86:bd:fc:6d:d1:
17:fb:2e:9d:a2:0d:fa:e0:b2:8d:fe:90:22:70:79:
71:90:c6:c2:3d:f2:58:99:47:d4:7b:ee:ad:6d:48:
6c:97:74:c6:bd:0f:cf:ff:e3:a8:d5:da:52:dc:bd:
bd:2b:02:a9:52:af:3d:ea:ce:42:fe:6f:5d:b5:da:
31:0a:d9:25:bf:34:70:98:71:7e:92:3d:4e:12:69:
9b:43:aa:6e:1b:80:db:01:63:c0:0c:e1:da:2a:e7:
90:4b:de:d1:c6:71:70:8c:91:78:bc:68:75:03:6c:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:59:5C:3B:6B:E2:BD:CF:28:3A:CE:7E:5A:58:0D:E6:0E:91:AB
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:a6:99:51:45:f1:d3:5a:79:97:6f:50:99:43:15:d5:ab:
92:65:68:bf:5b:80:46:c7:d4:88:72:e0:94:5e:13:f7:c5:fd:
1e:13:09:1f:c7:50:8e:14:66:2d:62:4a:89:37:89:1e:f0:22:
1a:b0:db:1d:ea:42:52:e9:19:3c:f2:c3:d8:8f:f8:46:f3:7a:
23:cb:fb:9e:24:ed:1e:b5:8a:42:b0:2e:c2:28:9a:51:2a:43:
b2:6f:70:1f:cc:dc:5e:b6:81:3b:22:bb:63:c2:1a:fa:65:36:
b0:9a:f3:91:ec:32:c4:51:77:d0:85:74:ec:8c:9e:d3:cf:71:
8a:c5:d3:05:af:90:43:a7:0d:58:f0:bb:c9:4c:f3:c0:aa:2d:
e4:c7:62:be:3f:5f:e8:af:dd:b6:dd:8c:b5:b5:69:04:91:e0:
a7:65:db:72:cc:b0:73:f5:0a:6c:6e:0e:ab:6c:14:da:d6:bf:
e9:00:8d:0a:15:02:e0:c2:5b:0c:1b:1d:9d:2a:83:5b:2e:dc:
d7:d7:50:a8:48:4a:58:e4:bb:2c:9c:a7:0c:61:0d:53:dd:60:
c3:83:bd:2c:bf:2b:a3:09:ee:22:60:7c:75:70:4f:e2:f6:4f:
12:cc:5d:ca:0c:bb:bf:fe:7c:f7:c1:16:d4:53:e1:d4:ed:0a:
64:af:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:21 2025 by rpki-client