Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: jw/vp3e7pgqJHfoWKJS5GQF7jx8GdyV1Dtpc2e12O24=
Subject key identifier: A8:AF:A7:24:98:1B:0A:B2:3B:2A:9D:DE:22:C2:5E:3F:EC:71:B8:60
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 0197C537F352C4200B3AC25DBA55E71E1560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0609
Signing time: Tue 01 Jul 2025 09:01:07 +0000
Manifest this update: Tue 01 Jul 2025 09:01:07 +0000
Manifest next update: Wed 02 Jul 2025 09:01:07 +0000
Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: OZqU+atIcVkv5epTrRiKfasBM32ht3L6iDBU4D41Zs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:f3:52:c4:20:0b:3a:c2:5d:ba:55:e7:1e:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Jul 1 09:01:07 2025 GMT
Not After : Jul 2 09:01:07 2025 GMT
Subject: CN=a8afa724981b0ab23b2a9dde22c25e3fec71b860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:18:9b:de:9f:6c:b5:95:88:03:3a:34:3f:
e5:80:f5:8d:ae:0b:f3:36:90:d3:db:ef:44:df:34:
46:48:a8:04:e3:23:a1:c7:bc:64:9f:92:1e:b3:31:
c6:38:e6:d6:b5:ed:37:96:f3:d5:07:40:a3:f3:eb:
c0:ca:60:1d:72:03:74:87:02:36:1d:ca:da:2a:6b:
21:23:74:47:7e:48:fa:0b:64:e8:9d:40:8d:16:20:
17:67:34:cd:7d:1b:56:dd:56:46:9c:5a:0f:60:09:
eb:56:ff:34:68:f8:94:d1:d3:ce:92:26:c8:7a:f8:
c8:e9:b2:6a:9e:90:cc:a8:69:63:58:f7:ec:8c:de:
6d:56:81:9b:45:0a:0d:16:66:7a:9e:4d:f5:e9:99:
7d:3c:7b:0d:b9:44:e7:b7:78:ed:14:5b:a8:67:f5:
89:5b:66:b5:e2:af:20:57:a3:3d:ce:77:df:a1:fb:
44:5f:e7:a9:39:82:83:96:35:eb:9c:e0:8a:64:7c:
40:75:8a:c2:b8:5e:d0:de:53:75:de:a8:0f:1e:0b:
c4:72:73:7e:32:83:90:64:98:21:51:6c:42:5a:dc:
92:85:15:9f:82:f7:20:b8:49:8c:63:6f:9b:99:4d:
ae:b9:e1:83:11:d4:20:dd:14:7c:84:cc:73:1b:66:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:A7:24:98:1B:0A:B2:3B:2A:9D:DE:22:C2:5E:3F:EC:71:B8:60
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:71:86:c7:b1:2d:e9:3a:37:ac:d8:c0:cf:63:63:fb:e0:
9b:e4:fa:92:75:35:7e:7f:fc:c9:6c:81:85:02:e3:29:7a:9f:
80:16:f5:60:5b:de:96:ac:53:e4:8a:de:12:f4:a5:d0:7d:44:
09:8c:7f:e8:1b:07:e5:7f:2f:0f:e7:f3:b3:f8:e0:0a:60:af:
79:43:7f:5b:be:f2:14:f7:93:b4:4e:2d:e4:74:8f:97:c6:01:
e5:e7:cd:2a:b9:2a:13:00:a6:20:5c:75:f7:4e:41:a9:36:af:
8c:00:36:36:de:8d:36:3e:54:71:f8:ec:f0:4a:cf:cf:1f:50:
71:b8:4b:f9:c4:22:e4:af:8b:21:1b:c3:81:37:79:55:23:45:
b6:5c:d0:b3:54:2a:27:12:83:7b:e6:e5:d7:23:f1:93:d3:6e:
45:45:17:f7:e6:73:1f:d2:cd:8e:ec:b5:56:99:75:d5:c0:13:
4e:02:fd:22:3a:b2:8d:4a:28:85:9f:db:c9:5d:b2:ba:6d:19:
76:5c:6e:d0:6c:eb:56:02:00:0f:a7:9e:3b:59:93:00:f4:51:
a4:25:02:f5:af:a4:33:6d:51:79:38:7c:b4:c9:a9:5e:33:be:
69:0a:76:4a:4a:db:9e:61:a0:a5:d0:59:1c:7d:44:ec:8b:9e:
b8:b2:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:08:55 2025 by rpki-client