Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: Tibj+OrfC41dNGc90lGkQh2jbq+KHvLaw6TZWFs8RLE=
Subject key identifier: 65:00:32:E9:F8:F5:B5:B3:80:C2:AB:96:7A:55:B2:9E:A8:5B:93:B9
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01974FA0C78C3F48E562EA57997A20253252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 09B2
Signing time: Sun 08 Jun 2025 13:00:26 +0000
Manifest this update: Sun 08 Jun 2025 13:00:26 +0000
Manifest next update: Mon 09 Jun 2025 13:00:26 +0000
Files and hashes: 1: K7bHv-ntCkLHGgtD3GP4pZg-0HE.roa (hash: sF0L1bfvPm8HvYASjwb0jRSaCB2jonmzTiMF+U2X9qc=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: 7KZ5IfHULku/UamJra8hvDA9/TEmx6zE9JsCbyKf4aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:c7:8c:3f:48:e5:62:ea:57:99:7a:20:25:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jun 8 13:00:26 2025 GMT
Not After : Jun 9 13:00:26 2025 GMT
Subject: CN=650032e9f8f5b5b380c2ab967a55b29ea85b93b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:c3:69:71:e9:5b:20:fd:5c:52:e9:95:b1:
47:46:e9:13:6a:7c:14:73:3f:d0:5d:2f:1a:21:24:
2a:94:da:6b:e7:71:25:06:90:d9:9d:b0:be:64:d1:
38:57:7d:3d:d1:3b:9f:d9:9e:80:10:ed:49:d1:d4:
d7:40:10:2f:c1:e5:1c:94:cf:66:37:6b:66:dc:11:
64:74:75:30:38:3a:82:1e:50:39:94:47:91:8e:6e:
59:18:7c:69:10:d6:74:4f:00:e1:71:ab:db:fa:32:
3d:bf:4b:55:c0:07:0c:8a:df:7c:9c:2a:fc:a4:90:
1e:aa:d4:fe:cc:8c:d9:5b:d6:95:99:c0:a3:c3:cd:
09:6f:a2:0c:11:ec:77:0a:f9:de:6d:24:e5:ef:50:
d7:af:8c:51:a6:2d:9e:dd:90:4b:89:ea:b0:7b:6d:
7a:b3:22:b9:e4:cc:d2:21:5c:d5:7d:45:46:06:37:
15:28:e4:aa:aa:85:94:6e:85:b0:5c:0e:be:25:29:
1d:7c:42:a7:b4:32:ed:84:ed:2f:cc:42:7b:bf:4d:
91:91:ab:70:b7:cd:f9:89:7f:a3:2d:6b:77:b2:75:
28:5f:a9:66:6f:46:ab:dc:c2:d1:d4:a6:a5:53:87:
fd:f8:72:81:64:da:0a:a4:8e:8a:96:72:01:97:35:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:32:E9:F8:F5:B5:B3:80:C2:AB:96:7A:55:B2:9E:A8:5B:93:B9
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:11:17:e9:1e:41:4c:c1:5b:b7:c4:8e:bd:d0:75:54:26:43:
15:b0:9f:62:3a:1b:39:7e:9d:87:19:c5:b4:2d:16:be:af:57:
aa:03:a3:d8:21:d5:1d:82:f3:dc:0e:94:06:60:a3:2d:5b:ef:
13:b5:5d:dd:1e:20:69:2d:3f:ed:2e:98:ab:b6:35:c5:75:a9:
e1:a9:e8:78:c4:79:c6:6f:54:d1:0e:30:48:ad:2b:ab:a5:0f:
d2:5f:c8:17:70:84:96:c1:0a:32:81:55:f5:b2:05:13:a4:b5:
01:8b:49:dd:45:1e:8d:3c:14:cb:dd:b5:10:fa:1c:22:fa:9d:
03:b1:2d:47:45:d0:49:7f:1f:c7:31:60:96:b0:b5:20:43:32:
1d:44:45:2e:84:e9:b2:f8:ea:cb:07:23:45:1e:d0:1a:b5:da:
8d:80:17:84:0d:c5:32:76:de:17:6f:5f:07:fa:59:3b:83:11:
6e:1f:a5:5d:2d:3f:ac:b0:0d:0d:e0:a5:59:09:5d:de:ed:d6:
23:dc:0f:fa:db:ef:83:d5:49:22:e4:b4:5b:30:a3:0a:d0:69:
05:55:f3:46:c8:bf:89:b5:2d:d7:3c:96:77:c7:31:01:27:5c:
9f:de:6a:1f:8d:35:42:a1:fe:46:39:98:c6:d4:4a:8e:bb:e3:
9f:b1:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:44 2025 by rpki-client