Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: EBDwUN++Iy4oXOqztq817D043+f8xgm4bTm2dlEwmNI=
Subject key identifier: EB:92:51:97:17:EF:10:CB:03:49:FB:67:27:16:60:30:AC:86:72:D0
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019849D35B33F9E02953EEFB60CE173904AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 130F
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: aUCxWppTbkcV6AOnJn14lDMx1HKKIAglN9JqV9ltPr4=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5b:33:f9:e0:29:53:ee:fb:60:ce:17:39:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=eb92519717ef10cb0349fb6727166030ac8672d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:c1:f3:e4:a6:92:39:3c:8a:86:53:65:81:
30:3f:61:ab:ee:c4:c6:06:b9:47:58:7b:d2:31:b3:
60:8c:b2:cb:14:25:89:3b:6d:90:72:d1:a2:8e:81:
99:4a:63:1e:e8:5e:06:b8:57:2d:d3:5b:50:20:42:
6e:ee:90:81:79:a6:b6:a7:23:29:70:8e:97:07:16:
6a:f4:cc:77:ce:36:a2:bf:82:3e:ae:b5:7f:95:2c:
0a:46:f4:1c:82:7b:4b:be:05:39:41:e6:85:f9:5d:
a4:95:ca:ad:d4:d2:5b:cf:b1:73:b1:ce:31:c4:46:
3b:82:66:90:b6:3b:31:d9:c5:ef:52:15:bc:4b:78:
78:21:cd:9d:c4:0a:70:8e:e3:0a:bb:10:de:ce:f2:
4e:a5:5f:8f:00:a4:60:47:66:da:24:54:28:94:4b:
87:82:05:2f:f5:d4:57:30:b7:99:15:50:e8:b4:fe:
51:c3:51:7d:ab:6f:d0:f4:c1:2e:86:4d:4a:85:a0:
c3:28:50:7b:27:b2:fc:07:73:d8:c8:b9:49:71:f9:
52:bb:3a:66:ca:ce:ef:73:7c:05:b8:29:7d:58:42:
a6:84:8a:84:e3:42:89:0c:d5:5c:53:a5:98:3b:d2:
0c:37:a3:26:1a:d0:6a:87:51:c9:24:0b:be:2d:09:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:51:97:17:EF:10:CB:03:49:FB:67:27:16:60:30:AC:86:72:D0
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:68:1a:97:2e:3e:24:42:4e:2d:a1:56:c0:eb:b9:9b:01:
b5:e1:16:42:36:b9:6c:aa:41:e8:01:b7:1f:2f:d2:ed:78:d6:
77:c4:90:c0:06:25:ee:2e:06:41:10:f2:c2:87:e2:0d:f3:4e:
9d:0f:60:c7:48:97:0f:f7:f1:ba:3f:a6:9e:6d:f9:1f:33:1f:
6c:66:dc:0c:10:10:42:82:69:91:94:18:9b:a6:bf:db:f7:8f:
2e:4f:b3:da:ab:44:86:2e:43:1e:5e:4c:f8:0d:ef:bc:ce:1d:
32:9a:1a:83:eb:d3:21:2e:90:91:a2:83:c4:47:9f:ee:f8:b9:
36:45:17:7a:c1:81:f8:50:40:e3:88:1e:00:17:f1:dc:84:2d:
c9:1c:43:f6:50:20:f0:00:78:6d:42:91:40:8e:61:64:d3:40:
5a:42:13:f3:51:6c:55:b5:e8:2a:45:b6:99:0a:fa:99:92:e7:
ed:5e:5b:39:aa:04:e2:e2:83:05:9f:7a:a6:59:f0:24:ad:f2:
95:47:05:98:6a:a2:d7:ff:48:59:a0:22:85:6a:7f:8a:68:2c:
59:83:21:bf:90:b2:97:b2:18:a8:b0:25:05:d7:ee:c8:3b:97:
d4:ad:b1:aa:bd:c5:19:51:a2:49:e3:83:a9:7c:02:9e:ff:b6:
d2:79:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:40 2025 by rpki-client