Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: 1yX1fiGPhh5YtPPwRuFTCq1Qm1N4KxEENVUwMBqpAAw=
Subject key identifier: 56:CA:47:3F:D2:29:A7:12:5D:D1:B5:56:FA:CC:ED:B0:57:31:D4:72
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 01985569BA86963D8032C9C62884A23F8BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 062C
Signing time: Tue 29 Jul 2025 09:00:49 +0000
Manifest this update: Tue 29 Jul 2025 09:00:49 +0000
Manifest next update: Wed 30 Jul 2025 09:00:49 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: tam69hVhdGIQePLHW3oiXdqXqJ/851IqGuaL3jr/3C4=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:ba:86:96:3d:80:32:c9:c6:28:84:a2:3f:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jul 29 09:00:49 2025 GMT
Not After : Jul 30 09:00:49 2025 GMT
Subject: CN=56ca473fd229a7125dd1b556faccedb05731d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:de:1a:19:a0:de:7a:48:2d:bc:ba:73:32:
a7:3f:ec:6f:00:ea:ba:25:70:d7:3f:0c:20:04:a0:
c0:9f:ac:50:5a:bc:18:b2:dd:12:39:71:8f:a7:6c:
83:25:4c:8e:3e:ef:b7:d5:95:a6:06:f2:09:6c:09:
e6:4a:ae:c0:8c:df:86:60:42:e7:7c:0c:42:8e:2d:
f1:c1:f4:1e:13:6f:1d:e8:b2:92:77:c1:46:ee:56:
dc:29:d3:39:49:d8:31:87:3a:d3:db:64:5f:b1:89:
1b:05:04:f0:c3:c3:4a:1a:9d:1a:46:e5:24:e3:fe:
12:5d:93:7a:74:6a:87:d5:a4:45:3f:71:30:24:c1:
bb:01:b2:95:cb:ad:06:a2:2a:d7:97:45:27:ed:12:
d6:40:38:05:c8:04:d5:e3:c5:44:1b:28:00:f3:cb:
ef:f0:0b:ee:bc:f4:77:8d:6c:15:32:7c:a5:06:1e:
14:87:20:55:79:42:10:3d:71:ee:66:00:3e:26:81:
be:d5:6a:82:00:d0:60:a9:a7:c6:b8:c3:88:53:1d:
fd:33:84:cb:79:9f:79:ad:a7:de:13:48:c1:46:8c:
f8:d5:29:99:aa:54:91:b8:c4:a0:c6:59:7c:81:d6:
eb:06:83:92:59:84:09:ee:77:43:1f:28:3b:e5:34:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:47:3F:D2:29:A7:12:5D:D1:B5:56:FA:CC:ED:B0:57:31:D4:72
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:06:7a:9d:fb:fb:09:ee:74:a1:12:94:fd:58:c5:2b:fd:d7:
42:c0:29:62:ff:3c:b8:a2:54:1c:23:f3:31:f5:5c:0d:16:e1:
1c:cc:99:f6:95:b6:b3:f8:09:67:d8:3a:ba:63:97:8c:33:0f:
a9:9f:6d:e9:0b:c2:45:c3:6d:73:66:11:fe:ec:34:63:50:5f:
a6:e0:4e:db:10:fe:8f:0c:73:6c:d2:05:37:d1:8c:9e:88:dc:
d4:1d:9c:5c:0b:27:f0:a1:47:6d:65:d6:f1:bd:c9:ee:8a:ca:
14:ba:3f:ec:b0:6c:ec:e2:18:1f:59:9f:f7:c8:df:e0:68:1d:
68:76:74:7f:0e:0d:62:e3:12:1a:d8:5b:fe:f4:4b:e1:af:e7:
ea:48:52:02:0c:15:cb:9f:a2:2e:10:cd:f8:c6:2c:84:e4:57:
e8:0b:12:ab:b4:9c:84:68:7e:a6:66:7b:a7:98:c4:5b:14:bc:
a4:58:07:c0:20:17:1d:fc:b3:2f:b8:6a:60:3a:dd:5a:63:53:
c7:50:e6:61:15:9b:8b:72:23:9b:26:4c:d5:3e:b4:fb:eb:f8:
3d:45:e6:c9:4a:a1:d7:bf:93:d4:d8:09:8b:36:db:fc:40:7c:
08:aa:2c:6c:bc:42:32:0b:59:22:bd:5a:d2:d2:d1:36:af:25:
c5:d1:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:50:09 2025 by rpki-client