Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: hiI8PjebV4v6mMn1yfFIH6ZbSuN0La5laqWnAb9rvfQ=
Subject key identifier: 05:C9:E7:40:61:A8:0F:E6:E4:D2:4D:5C:C1:C5:EA:C1:34:9D:70:4D
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 0197B63299DEB3DE79EB9DFDD778A836E6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 0FAE
Signing time: Sat 28 Jun 2025 11:00:58 +0000
Manifest this update: Sat 28 Jun 2025 11:00:58 +0000
Manifest next update: Sun 29 Jun 2025 11:00:58 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: 5P4hk9XxCgO3Z2ZA6fpdy5OhkkziOq8VarllOUR4xFI=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:99:de:b3:de:79:eb:9d:fd:d7:78:a8:36:e6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Jun 28 11:00:58 2025 GMT
Not After : Jun 29 11:00:58 2025 GMT
Subject: CN=05c9e74061a80fe6e4d24d5cc1c5eac1349d704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:da:1b:a9:5e:0d:32:88:63:15:bd:43:db:
e6:74:1c:53:94:f3:26:09:84:ad:69:22:a8:65:90:
da:46:8c:f4:65:40:a4:99:5c:83:81:e0:65:fc:8f:
8f:53:05:83:1e:b1:b9:19:00:c2:5a:41:24:46:21:
ec:fb:d7:24:38:1c:5b:18:0b:da:02:65:53:5c:fb:
3a:8d:03:54:b2:21:17:d4:2e:aa:d6:02:cd:82:d6:
f2:8e:37:67:90:a9:0d:22:0a:66:6a:64:ea:0a:df:
af:ad:6d:70:93:14:4d:1d:1d:6c:85:c1:ad:cb:43:
43:94:19:50:f9:2e:c0:43:a5:e2:6e:9c:66:dc:93:
18:00:65:ef:63:3f:e9:30:f3:56:27:cf:c2:6d:a2:
f5:9f:af:1b:3d:fd:1b:49:0f:c4:8a:dc:71:02:18:
bf:dc:e5:71:52:6f:2b:11:32:1e:02:45:32:90:52:
5c:2c:83:af:f2:bf:7c:28:99:b9:cf:03:10:7c:6f:
c1:b8:5a:1a:4a:81:1f:cf:3f:57:b4:d7:83:5a:c7:
db:cb:54:30:63:21:5d:05:ab:31:9b:64:a0:fb:76:
5d:78:b1:71:85:64:95:75:60:06:fa:fd:0e:92:92:
c9:07:22:09:4f:e7:53:46:0f:59:fa:70:b5:b2:4a:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:E7:40:61:A8:0F:E6:E4:D2:4D:5C:C1:C5:EA:C1:34:9D:70:4D
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:4b:28:32:d1:53:a6:06:0e:07:95:55:b0:9d:8a:a2:0a:
20:d1:1e:19:53:68:d7:19:93:e2:81:36:ca:bb:8f:63:da:77:
0d:56:41:12:63:88:4c:d3:e9:7a:fa:bf:4f:37:a7:22:ba:10:
45:b7:ad:37:b6:6d:21:8a:34:fa:e3:6e:62:57:83:97:a7:b9:
8e:6f:a3:a8:98:11:25:7b:85:ee:32:d5:bf:5a:69:86:77:3c:
d5:54:80:92:bc:69:59:cd:97:e8:40:95:9a:ab:dd:a0:46:92:
0e:46:60:e2:b5:eb:ab:9b:76:4e:30:ac:6c:1e:e1:a6:c8:3b:
3a:1f:75:15:02:1d:19:70:17:af:67:46:f8:04:11:15:66:45:
09:e4:07:16:07:ea:29:13:51:b8:9c:6a:ff:df:f8:6e:be:93:
23:c1:74:ab:15:44:e5:ca:cb:16:3a:40:bb:7f:9a:c7:74:61:
1a:c7:0e:46:d1:d5:b9:82:55:b3:74:72:98:d4:af:3f:32:18:
ac:c4:1a:47:3c:09:a8:ce:d2:26:fe:d5:eb:02:69:2b:41:dc:
27:3b:2e:1e:cc:32:c3:a8:c3:d1:88:be:29:01:42:ec:28:82:
77:d4:74:64:1e:79:e3:21:d9:83:82:62:91:ea:e8:7b:d9:19:
d3:51:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:44 2025 by rpki-client