Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: qd+9HLueEsc9nzoB6AazXlUh2TNbIiNrHaTmv1Xq1Eg=
Subject key identifier: B9:CD:4A:EA:31:81:4F:08:38:40:CA:73:CA:66:FE:48:A3:3A:21:25
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 0197C0B6AD32BE6BB3C12939914AE62E6D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 0E57
Signing time: Mon 30 Jun 2025 12:01:26 +0000
Manifest this update: Mon 30 Jun 2025 12:01:26 +0000
Manifest next update: Tue 01 Jul 2025 12:01:26 +0000
Files and hashes: 1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: C0IpnPzRmJKReLgMnIFyzM7OE7ad83k2ozxCvSno2mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:ad:32:be:6b:b3:c1:29:39:91:4a:e6:2e:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Jun 30 12:01:26 2025 GMT
Not After : Jul 1 12:01:26 2025 GMT
Subject: CN=b9cd4aea31814f083840ca73ca66fe48a33a2125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:c8:3d:9b:ed:2c:d7:85:34:14:7c:4f:1e:
7c:6a:64:11:4d:b7:a9:64:61:86:9e:47:84:4d:05:
52:61:26:dc:af:bb:7c:6a:00:cb:94:2c:a5:ef:b6:
78:f9:68:89:a5:98:32:f6:5b:16:bc:d6:6b:8d:4d:
e1:7a:3d:cc:0b:79:8e:71:e3:8f:74:04:9c:cf:df:
67:81:7d:46:a1:42:6d:b9:60:f0:36:66:dd:ea:05:
e8:de:8e:55:d0:ea:d8:6e:a3:3a:a5:7f:ea:59:3d:
37:b0:84:0b:9a:df:48:3e:86:85:23:ae:d7:91:d4:
2c:ac:29:c1:c8:be:00:07:90:27:85:bf:0c:dd:42:
4f:c9:47:49:53:9e:45:98:d8:e8:fa:32:f6:00:ce:
b8:da:cf:e9:f3:20:0e:06:6e:67:cf:24:9f:dd:78:
2b:10:26:49:16:41:69:42:36:40:32:25:fc:4e:37:
9b:86:23:07:c1:e5:88:07:1e:57:c8:28:dd:f6:a8:
9c:1e:ea:84:9f:3e:a0:0e:84:a5:06:06:53:2c:17:
dd:71:6f:17:86:d9:c0:3b:e8:a8:a3:56:ac:e9:6d:
b9:18:79:d2:06:33:69:f1:f3:07:90:ba:d5:bb:7c:
47:8e:40:f9:88:cc:9e:de:61:02:71:bb:68:fb:50:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:4A:EA:31:81:4F:08:38:40:CA:73:CA:66:FE:48:A3:3A:21:25
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:c8:23:5c:92:b6:71:0c:2c:7c:9f:00:7b:8a:f7:4d:9d:
a1:a9:4e:83:0f:44:32:8f:6e:29:b4:78:bb:08:83:b5:96:bb:
7d:6d:b3:96:3d:b3:f7:96:c4:e1:d7:99:2b:13:09:af:d4:90:
f3:25:97:f3:5e:1e:e9:3c:50:38:47:a7:26:98:94:5e:30:c4:
c8:ce:33:dd:fe:e2:28:00:fd:0a:64:75:e8:58:8b:3b:a5:d8:
3f:23:9b:63:76:30:69:2f:f3:13:5c:f4:9f:08:d2:6c:82:a8:
7e:a8:3a:34:a2:53:38:61:f3:b6:d2:e1:88:21:1c:6f:a3:03:
80:68:15:a2:d7:e8:85:5b:2e:d8:6f:4a:ca:4d:cc:2f:01:39:
5f:47:5d:d1:ce:e9:19:c0:24:9b:e2:f6:36:99:6d:b9:d9:9a:
69:a7:5f:7c:1c:93:d4:a2:b8:16:79:23:cb:b6:1b:4f:e1:6a:
bd:80:65:67:05:57:d5:8b:d1:22:cd:12:a5:66:20:2e:83:4e:
2d:38:d1:bf:a4:cf:58:9f:43:bb:bf:07:94:6a:70:b4:45:64:
b2:ad:8f:5f:70:5d:32:85:3d:3d:de:73:de:a9:3a:31:df:de:
3f:50:c3:51:ee:89:3e:03:97:54:9c:2a:2c:81:79:3d:0e:14:
b3:8e:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:21:24 2025 by rpki-client