Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: HfymWYWvCWTHEGXyHJGqT6XY35QZAZslsIxbukx1COo=
Subject key identifier: 8B:71:CE:A9:82:54:77:58:E9:01:53:CF:BF:29:8E:6E:75:7C:DE:D6
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01974967B9C64CB18FC7061250B1BDC423CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1301
Signing time: Sat 07 Jun 2025 08:00:23 +0000
Manifest this update: Sat 07 Jun 2025 08:00:23 +0000
Manifest next update: Sun 08 Jun 2025 08:00:23 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: GYz23ObPYbgdHTI1SnYmj5IrP2nBhJFPx43sN8iOfd4=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b9:c6:4c:b1:8f:c7:06:12:50:b1:bd:c4:23:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jun 7 08:00:23 2025 GMT
Not After : Jun 8 08:00:23 2025 GMT
Subject: CN=8b71cea982547758e90153cfbf298e6e757cded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:02:cb:c4:71:78:58:2c:1a:8f:e8:e4:c9:
41:ea:29:ff:54:ee:03:8d:b5:96:76:35:0c:04:4e:
8d:ed:58:61:10:e1:1b:5b:5c:e5:68:eb:e3:3f:eb:
26:a8:3f:c5:af:57:f2:90:db:30:49:8a:af:f6:02:
d6:1b:9c:a5:70:d2:5a:39:5e:7c:ed:ca:61:f1:8b:
f2:1a:37:f4:ae:37:55:2c:2f:2c:3f:61:ac:c3:d6:
f5:ca:3c:a9:6c:e7:45:cc:1f:a4:eb:f1:a9:19:8e:
26:5e:a2:e7:07:1c:15:20:8b:98:5a:3f:70:21:ba:
8a:4e:bc:0b:90:c5:cf:8c:53:bf:85:21:89:93:37:
0d:28:ce:46:19:88:69:c0:83:45:3d:ea:32:bd:2a:
ef:b8:f7:72:ab:38:88:d9:5f:75:ca:6f:d4:6f:52:
0a:d1:72:9b:3f:43:66:4e:7e:6d:9f:d0:e4:31:56:
26:9c:9c:32:b3:4b:f9:4b:95:cb:f1:cc:77:c8:60:
b3:be:cb:35:87:23:77:9e:91:23:44:ee:4f:2e:ab:
06:0a:d9:c9:6d:da:e4:a2:74:62:ef:a7:c2:d6:00:
0b:dc:f3:4d:43:15:38:10:7f:29:97:7b:97:1e:15:
74:fe:7a:b9:27:36:b1:11:e5:42:15:03:7c:28:b8:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:CE:A9:82:54:77:58:E9:01:53:CF:BF:29:8E:6E:75:7C:DE:D6
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:7f:3a:a8:eb:bf:86:4a:34:bd:42:a0:e0:f0:24:b0:d6:
1e:ab:be:b2:f6:9a:e5:7f:5a:3d:6f:9d:6c:ad:d1:ec:04:af:
64:42:17:88:44:fe:d8:68:f1:8c:28:f4:71:63:e6:63:ef:29:
28:db:7e:32:67:91:09:aa:cf:18:2d:d5:12:5f:8d:9f:df:b3:
41:f4:44:8e:48:c2:cb:a6:a6:67:12:be:e4:ed:ae:c4:2b:96:
61:64:1e:2c:f0:64:68:06:59:f0:55:01:63:3d:e0:e4:d2:ee:
3b:26:19:04:9b:17:aa:44:57:d3:61:68:e1:b0:13:5e:ca:14:
0c:43:3e:39:14:d5:ce:02:41:e2:76:3d:ac:fc:59:77:b0:61:
bb:53:5e:ae:82:e6:92:bf:7b:9f:91:21:54:1c:13:d5:dc:73:
de:1d:1c:b8:84:61:46:ca:0e:de:f0:9a:a4:72:13:89:00:88:
35:03:e9:03:c3:b4:a9:55:d2:7a:59:d4:08:d2:61:77:34:ce:
cd:c2:2f:6e:f6:04:29:52:80:c0:3c:ff:68:af:b8:92:3f:0e:
f1:b9:d9:9f:3f:1b:9b:18:fd:ab:5c:65:36:89:51:0d:b1:d9:
84:ef:0b:63:5f:7a:2b:28:f1:0a:7b:67:8f:78:13:c7:bc:10:
ea:25:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:07:20 2025 by rpki-client