Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: QAGQSzol4cIFkNZtg820h89RuVMYo86dcgWp1lc5drE=
Subject key identifier: 34:D2:D2:05:03:43:B1:6A:88:C0:0A:86:7D:49:31:4B:5D:55:30:4C
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 01984A0A2D0E01F4C02F61010DACD73B9A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 02C7
Signing time: Sun 27 Jul 2025 04:00:37 +0000
Manifest this update: Sun 27 Jul 2025 04:00:37 +0000
Manifest next update: Mon 28 Jul 2025 04:00:37 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: Byz/bUeBvQfdmhmukOQkcz1iZK2ICH+hzj2LuFwhy/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:2d:0e:01:f4:c0:2f:61:01:0d:ac:d7:3b:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Jul 27 04:00:37 2025 GMT
Not After : Jul 28 04:00:37 2025 GMT
Subject: CN=34d2d2050343b16a88c00a867d49314b5d55304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:f9:91:fe:c5:3c:b7:8b:59:b8:33:12:94:
58:1c:54:c2:53:05:7a:e9:72:4e:b4:ac:9e:ec:3c:
1c:b5:68:5a:ac:f6:47:7c:7f:cb:da:d3:27:eb:83:
92:e6:13:18:4a:4b:fe:78:bf:37:a8:5c:d3:c9:1a:
18:da:e0:72:af:43:5b:ae:cd:de:bc:3a:aa:a8:99:
e8:71:0b:9d:5d:1a:09:3d:c4:32:b1:17:04:2f:c9:
11:7b:cd:1f:97:5a:17:ce:cb:8b:97:6c:a7:a7:e5:
ee:77:9f:bd:4e:fa:14:ac:10:23:58:66:ec:ca:c0:
0e:b2:d6:48:26:cd:d1:3f:26:ae:14:87:b0:66:74:
cf:f7:a6:18:8b:6d:1b:f7:8e:e8:1e:6a:46:51:46:
fc:12:27:98:91:f3:79:e6:cd:69:1c:07:ce:78:a4:
60:9e:8b:a3:ba:29:0f:4b:12:0b:bf:e9:f6:da:9e:
2a:30:50:36:64:d0:e0:26:47:28:fd:b2:04:7a:92:
f1:33:ef:e5:e7:fd:68:ba:b0:f8:77:e4:60:c3:bc:
6f:f5:d9:14:aa:3a:60:7a:b5:0b:d4:b4:9b:d2:ce:
ae:a4:b7:7e:81:03:4d:c3:fd:e6:22:6d:f1:ef:cc:
54:79:d6:62:ed:1a:ae:28:2f:18:47:f8:85:ee:43:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:D2:05:03:43:B1:6A:88:C0:0A:86:7D:49:31:4B:5D:55:30:4C
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:8a:d6:c0:4a:c3:8d:4c:19:9d:32:34:2d:41:83:89:70:
99:f2:1a:fe:b6:61:be:ac:f3:94:3e:84:ee:0d:33:40:5d:49:
7f:b2:dc:17:2e:f0:57:9b:7a:f1:6b:ca:5f:5e:1e:37:dd:28:
dd:da:ed:33:62:f9:09:a8:31:4e:98:53:25:5e:b3:c3:d5:c0:
7e:21:4b:bb:c9:3e:68:e6:60:b1:50:c9:5a:5c:c6:2f:a1:f9:
e9:75:c7:59:9c:cc:6c:13:8e:cd:ed:48:66:9e:30:5b:3f:6e:
78:d2:66:83:04:76:2c:8d:64:fc:44:ad:a5:a7:aa:bf:e0:68:
bd:01:36:b4:4c:3b:eb:bc:5e:9a:3f:1c:48:38:fd:b2:66:04:
87:fd:34:d1:d5:09:1c:11:82:09:8c:99:4b:8d:a3:f2:b0:38:
7e:08:dd:8b:6c:59:ea:f2:cf:33:90:b3:57:b7:7e:49:6e:ce:
96:c4:28:aa:a3:83:1b:fc:38:38:e7:d8:af:55:4f:d8:01:f0:
97:b3:2a:35:d1:f2:d5:ba:5a:07:0d:2f:5c:6c:ac:e1:17:5a:
0b:cf:39:4a:13:9b:0a:90:70:14:9f:7e:8a:bd:67:8d:ac:71:
98:68:28:64:63:ae:01:3f:01:81:58:66:2d:15:3c:44:69:b4:
5d:1d:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:11 2025 by rpki-client