Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: QnOUr0nyzMoTdhq/qgVdEvvFQUxv07uohXSa7puqDzU=
Subject key identifier: EE:0E:8E:6C:15:2A:19:E6:BB:7D:08:F6:7F:C5:34:AC:8A:CB:0A:3D
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 0197B8902084B26EFB1B40381AB795127BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0E92
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: AHAEcpQC5M7HA3lpCyAUPO_2dfI.roa (hash: QyNnsqD7JTUcYd/+hLfrA6pGFz4v5bZK87dfCrHLd18=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: mxmVFLm6tTcjCCQXqHfxa1kWhDehy7Fb6EE992z46m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:20:84:b2:6e:fb:1b:40:38:1a:b7:95:12:7b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=ee0e8e6c152a19e6bb7d08f67fc534ac8acb0a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:e4:3f:07:7b:df:4c:79:dd:70:68:19:78:
98:72:9c:5f:dc:72:b3:ab:18:d0:e6:7c:13:69:6d:
0c:d3:75:ab:4d:8e:12:5c:76:1f:c2:1b:82:9a:28:
76:45:81:d3:87:0a:e4:57:ee:43:c5:cd:1b:e1:2e:
12:0d:f4:b8:94:3f:69:fc:c6:25:b8:41:e4:fc:be:
f5:65:d3:d4:45:f0:bf:c9:26:3a:2e:24:f0:38:5e:
12:a8:1d:c3:34:b1:88:a8:d0:25:b7:76:1c:ff:4b:
c4:45:d2:fa:ab:ec:c8:5b:ae:f7:8a:87:60:80:44:
09:ea:e4:44:ae:2b:72:c0:79:71:e7:6e:84:89:09:
9b:92:6e:a6:4b:85:1a:60:d6:04:34:dc:f5:ee:09:
6d:89:7d:59:d8:28:2b:69:2e:dc:76:17:99:89:43:
1c:c6:9a:97:1a:8e:e3:9a:8b:35:d9:ae:61:7e:90:
a9:20:62:7e:bb:43:fd:b6:31:36:dd:fe:34:49:b8:
2a:88:05:a3:7e:31:33:bb:49:18:2b:9d:dc:9d:63:
4d:fa:8b:9e:ab:fe:e1:62:3b:76:b8:8b:f3:a9:5c:
7a:0c:a9:c6:e9:fb:da:61:88:86:ff:71:00:93:8c:
af:1c:02:aa:87:b9:4e:d7:60:2c:12:42:8e:0d:42:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:8E:6C:15:2A:19:E6:BB:7D:08:F6:7F:C5:34:AC:8A:CB:0A:3D
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2d:00:dc:b2:c1:f6:65:1c:50:65:a6:fd:37:3e:f4:83:3f:
17:d1:21:52:e5:f1:ad:b2:c9:9c:39:f7:25:66:e2:39:87:f8:
a1:c2:61:3f:7f:9c:c0:2c:09:2a:e5:18:23:ea:74:1d:fe:87:
e7:0e:fd:cf:47:25:6e:5a:f4:fb:f3:5e:f0:10:d1:81:35:8f:
83:71:e0:5c:77:22:1b:a6:fb:54:6f:d7:93:53:66:8a:cc:6b:
c6:2e:36:5a:59:ec:d0:e7:13:93:b4:67:9c:5d:4a:74:7d:da:
88:e5:a6:ed:52:be:49:ed:ce:a5:37:0a:cf:43:91:26:e7:bd:
e5:d6:2c:d3:64:58:e4:70:4d:61:1a:3f:b7:a5:0a:0e:56:10:
90:2e:39:0b:ae:fe:82:09:08:99:fd:a4:ba:47:51:f1:dd:92:
27:20:0c:70:93:7a:23:ce:3f:1c:5d:db:8b:a3:dc:9f:07:d5:
72:69:35:47:dd:05:67:dc:a7:85:67:d0:2d:23:e9:8d:b1:91:
10:de:92:4d:2d:41:46:3c:cc:bf:4f:00:0a:dd:82:b8:a5:63:
b6:e2:62:8b:61:da:17:8a:74:59:ef:51:a0:e7:d5:d4:c9:f9:
4c:5c:41:97:51:c2:15:9b:09:b4:b5:9a:90:9b:5c:3f:25:e3:
0e:2d:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:11 2025 by rpki-client