Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: udY8GSliEepGhvhaM9MCPTeer68Zanv4umNS8oGaCZw=
Subject key identifier: AE:D8:B4:4F:96:AD:C6:69:0C:6B:E4:61:84:84:86:B9:1E:D6:1F:CB
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 0197B88EACC3BA0BE51831AEC3B25DF8F96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 0322
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: yFbZlvYVoCQguEs+/QfC1jdFNONp9YPM321fZ1lxhrM=)
4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ac:c3:ba:0b:e5:18:31:ae:c3:b2:5d:f8:f9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=aed8b44f96adc6690c6be461848486b91ed61fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:d1:37:d0:de:e5:4e:55:45:b0:76:62:24:
21:14:21:82:76:d8:3c:04:16:f8:cf:5f:ac:d6:a4:
20:26:1a:b9:9d:28:c4:8a:be:bb:b3:d3:d2:b8:97:
f1:0a:13:ee:6e:d1:6b:e3:fb:05:28:67:87:a4:ec:
73:0e:40:dc:82:9f:74:30:7a:2d:09:2f:4e:76:6d:
1b:18:43:d5:2b:6c:07:34:f4:c0:bb:5e:05:65:e6:
5b:a8:46:a1:90:25:ee:98:2e:99:a2:b8:3a:19:90:
ba:1b:c8:d3:f4:c8:06:3e:5d:4b:5f:fb:55:ee:88:
dd:12:db:d7:47:d1:a1:c1:5a:bd:77:c0:ed:c5:9c:
fe:57:b6:4d:a3:28:cc:96:fb:18:9b:3d:65:62:9c:
80:56:ed:51:13:60:28:83:f7:2c:0d:31:1e:f3:45:
e0:7a:6f:1d:bf:0b:61:5a:92:67:4d:ac:e9:4d:47:
be:b4:a0:a7:c3:52:d8:14:d8:16:71:13:71:79:0d:
a0:bd:a7:b7:84:3d:75:f9:18:a6:84:ec:f4:a9:08:
70:73:8e:0e:4f:b0:e9:70:f1:6f:db:78:01:53:5e:
fd:d7:02:89:45:04:57:41:27:80:1b:d3:c7:eb:ea:
db:df:82:27:3c:28:c0:7c:05:61:96:0d:ed:81:49:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:B4:4F:96:AD:C6:69:0C:6B:E4:61:84:84:86:B9:1E:D6:1F:CB
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:5f:82:48:ad:64:71:62:9f:92:80:50:d8:2b:2f:84:54:
11:ac:2e:a9:47:40:6b:74:db:d9:13:ba:d7:1a:2a:cc:20:12:
27:88:64:54:87:16:35:27:47:21:c1:89:c8:d4:c1:a8:08:85:
b2:56:fd:fe:0f:e5:5e:5c:e8:0a:79:99:d9:27:6b:fd:85:15:
a8:56:cd:91:68:2b:a9:99:eb:1e:90:8e:fd:1f:9e:19:b4:e8:
bc:1b:92:68:f8:4b:db:0e:0a:64:14:d5:51:d8:cb:2b:6a:b8:
6f:fd:3c:e4:11:c6:f9:15:24:fc:86:71:09:fb:90:ed:12:20:
7c:ac:dc:11:6c:16:94:c9:8c:d5:ba:e7:c1:8e:0f:e0:3a:c3:
44:cd:12:4c:0f:a9:5a:8b:73:5f:f4:9f:e5:fe:02:ab:36:6f:
00:d7:11:f3:1a:c3:a1:97:fd:b2:0e:05:5d:85:82:c4:25:03:
b0:ee:fb:4a:4a:00:cd:44:ad:1d:93:53:23:61:d0:00:c6:28:
4f:dd:bc:da:53:ef:a6:28:0a:90:c1:b3:ce:41:1d:0a:66:24:
52:e8:95:26:2f:c9:9b:74:7a:5a:51:ce:46:48:31:91:fc:fe:
35:64:21:55:35:62:6e:bf:81:65:15:10:79:b9:ee:c1:17:b7:
b2:bc:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:57 2025 by rpki-client