Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: g272pFAnYleRCS+vtpY8d+axbngthhBG50KX6kssOVE=
Subject key identifier: 9F:86:21:08:84:63:F3:7C:71:BD:47:5C:88:37:EF:4A:FE:79:EC:78
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 0197C5A5C8409175E9EBCCAC5CED48A963A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 096F
Signing time: Tue 01 Jul 2025 11:01:05 +0000
Manifest this update: Tue 01 Jul 2025 11:01:05 +0000
Manifest next update: Wed 02 Jul 2025 11:01:05 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: N9rLKqhQpS/2a8tUn8LFSoO5w8RyyWS0O2C/I0TlLS8=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:c8:40:91:75:e9:eb:cc:ac:5c:ed:48:a9:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Jul 1 11:01:05 2025 GMT
Not After : Jul 2 11:01:05 2025 GMT
Subject: CN=9f8621088463f37c71bd475c8837ef4afe79ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:94:b1:e8:b2:b2:05:79:d1:84:35:3f:97:
5b:21:e6:82:a9:6d:4d:df:4a:33:fa:ef:ef:eb:25:
02:7d:e5:c7:5f:73:96:e2:01:b9:b1:8f:ca:2e:39:
13:78:b2:48:d5:c3:a7:a4:d2:2a:c4:e5:f2:79:e7:
b8:bf:59:4e:27:82:96:6d:54:fc:55:3b:20:f8:ec:
87:42:03:62:77:76:47:9d:8e:9c:08:1b:e8:2d:48:
77:d5:de:53:bc:22:5d:48:4b:cd:8e:3e:75:7a:74:
a1:1e:59:ea:fc:8f:ef:9f:d6:e8:ea:2e:8d:7e:be:
64:9c:5b:95:b7:fd:fd:4e:23:51:81:e4:69:ee:f0:
f5:09:51:40:3d:a6:8f:f5:53:0b:eb:86:2c:e5:1b:
ab:ee:3a:a3:cb:a7:87:99:8a:fc:5d:0c:d3:10:31:
a6:5f:f8:9d:72:22:67:d2:02:5f:7c:24:8a:16:99:
9e:c4:7b:df:b9:f7:06:90:cc:4e:8d:72:0e:41:fa:
59:d8:91:47:c5:1d:bc:1d:09:60:81:19:bb:8b:ca:
36:f1:33:d1:a5:3b:8d:df:41:2e:9a:d0:c6:f9:e5:
cb:5c:29:07:ae:63:97:1d:05:01:19:05:8f:3f:91:
bf:f7:90:38:72:06:df:1b:bf:56:ee:0a:87:21:b3:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:21:08:84:63:F3:7C:71:BD:47:5C:88:37:EF:4A:FE:79:EC:78
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:74:15:d7:35:1c:4a:e5:6f:06:60:86:59:a2:8b:81:01:be:
0a:06:8a:b2:2b:5f:b4:9d:1b:98:48:cd:ff:73:fe:4b:b7:1c:
30:c8:4e:96:99:8c:26:11:2f:ba:f7:3e:9a:62:16:8f:32:90:
fa:95:75:d3:d6:0f:e0:a9:5c:dd:65:c0:b9:6b:2e:9e:3b:3c:
99:00:da:a3:68:0d:f4:61:6a:63:c7:76:72:54:23:b9:c6:bc:
ef:8b:68:de:d5:88:e4:6c:38:c6:5c:3a:13:d6:fe:e4:50:28:
c4:96:23:cc:76:6f:7d:86:5d:18:a1:de:28:75:45:35:06:1a:
1f:c2:af:9f:cc:bc:9e:61:fd:76:1a:2d:57:08:4f:b7:59:c7:
10:72:ec:34:c0:68:2d:7e:3b:eb:d1:c3:af:37:39:15:f5:04:
7d:ca:e3:45:26:b5:58:11:c7:a9:fc:9a:98:f8:19:2d:32:63:
3e:fe:b3:49:85:08:85:54:1e:61:e3:a1:1a:3b:b4:66:13:8e:
78:06:70:56:e1:f3:da:93:7f:c9:f3:08:2a:fb:f3:7b:81:a4:
da:e3:5f:e8:9b:53:57:29:8b:d5:5a:44:35:62:64:a7:14:a9:
e1:0b:1a:18:5e:7f:5d:fb:7e:a4:5c:cd:d2:6a:d2:48:97:bc:
e3:a5:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:26 2025 by rpki-client