Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: E/raAfvUWA3ILGW3mgK2l0kgRLwPhaoHOxFZ4jf+wEY=
Subject key identifier: 30:80:53:94:0B:3B:E0:D6:F3:A3:62:26:F1:0D:6F:C2:0B:55:42:C9
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0197B63270F76EE8FD5272C67EF0D491F085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0DE1
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: +Xq6oZ2cDddlmxlZ8YWM5Dx6QAopFJHVYxK1AUDulKk=)
3: WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa (hash: PgVhQbQKOEzO/hmF/YVvQFUh9kfxOMI2b5QsLYE0w8U=)
4: cko5XG2psMaYdcntaN1HSK0684Q.roa (hash: lkQjevFu2rUCjSzyySmPcpI4TxYE/2LkAr/jbemyCPU=)
5: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (hash: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=)
6: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:70:f7:6e:e8:fd:52:72:c6:7e:f0:d4:91:f0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=308053940b3be0d6f3a36226f10d6fc20b5542c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:47:3e:66:aa:3d:71:75:c4:71:48:19:71:
39:a8:2c:93:34:1a:7a:1c:cb:7b:b0:1d:a4:13:e5:
20:ff:c9:07:9a:ac:e7:69:29:90:72:82:2d:15:4c:
53:70:75:d4:65:61:34:d6:da:1b:45:e4:c2:16:e3:
7a:29:80:ce:bf:48:1d:76:34:31:fc:28:4d:bb:3b:
b7:10:11:55:31:d1:ed:e4:d4:b1:30:e9:c4:bd:85:
1e:e8:cc:bb:0d:2a:61:4b:49:c9:9a:3e:2e:89:e2:
aa:04:3f:1b:5d:23:87:0f:b3:be:49:cd:84:3b:82:
bb:eb:06:4a:39:e8:ea:4e:f1:07:98:a0:92:fa:bf:
6a:0c:a3:1a:27:ed:47:b7:d6:47:53:c6:c0:dd:b4:
ed:dd:96:09:89:00:b6:68:47:54:76:8e:79:04:44:
36:50:c8:53:cb:0d:1d:c6:aa:f6:1c:86:13:b4:a0:
43:5d:7c:76:97:b2:ac:8a:0c:36:84:64:bc:8e:b1:
93:58:fa:30:91:50:05:6b:a7:ad:5d:0d:7d:87:f4:
2c:ac:5a:55:3b:82:c5:5a:cb:51:a7:3a:e3:9e:ea:
7c:50:36:52:48:ca:df:30:4c:df:b4:cb:89:16:d7:
85:a1:de:4d:09:6a:a6:c0:2c:fa:28:f8:7f:80:71:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:53:94:0B:3B:E0:D6:F3:A3:62:26:F1:0D:6F:C2:0B:55:42:C9
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:35:f2:3d:0c:a7:77:77:51:d3:8b:63:e6:e8:31:5b:5b:
9f:4c:58:82:fa:e6:8a:67:c3:38:93:18:99:4a:aa:1d:5f:c8:
7a:a2:41:7b:12:68:9e:7b:ba:df:fe:52:d6:dc:58:9f:d7:06:
65:0b:0e:8c:bd:17:c2:19:da:dd:ff:9e:bc:2e:8b:1f:39:93:
7b:65:b0:ee:ef:1d:cf:60:34:35:01:98:7b:e8:70:10:eb:9f:
e0:a8:81:8b:fd:8c:e4:57:f9:12:cc:46:e3:23:2c:d0:4d:9b:
1a:dc:3b:91:fe:52:64:d8:2d:5a:65:46:10:ea:91:ec:47:93:
39:5c:81:39:cb:6e:1c:44:43:67:fb:3a:70:11:da:dd:55:58:
cc:00:a8:37:02:8f:01:6d:93:ef:f9:21:51:21:1c:17:62:15:
ff:5b:c9:b4:19:33:df:c8:2f:de:de:cf:c8:3c:57:c7:8a:71:
9e:c7:1a:da:87:d3:5b:c2:f9:7c:b8:7a:05:41:ab:17:6e:7e:
5b:ae:c8:9a:7f:65:78:42:1e:d2:eb:7f:61:7e:fd:22:92:74:
23:d7:3a:2f:f9:29:41:20:55:db:a1:76:8b:74:34:12:57:28:
fc:78:58:90:9a:68:a6:62:fc:66:16:9b:37:be:f2:32:59:ea:
87:e9:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:20 2025 by rpki-client