Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: XZXBnYakN7Egp4gfhgqxh0Fa0yRQVxVauUhCNrYxUw0=
Subject key identifier: 2F:52:5E:9D:68:06:DA:B3:A9:D6:B7:3C:A2:F3:87:FF:C4:32:24:19
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 01974D7C32D8DF567FBC91A8D7F7F0EBAD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 05C1
Signing time: Sun 08 Jun 2025 03:01:14 +0000
Manifest this update: Sun 08 Jun 2025 03:01:14 +0000
Manifest next update: Mon 09 Jun 2025 03:01:14 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: nydEGLzcX3IUy/f+8/mNFuoa7oneocU4KBM1ajdGTYo=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:32:d8:df:56:7f:bc:91:a8:d7:f7:f0:eb:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jun 8 03:01:14 2025 GMT
Not After : Jun 9 03:01:14 2025 GMT
Subject: CN=2f525e9d6806dab3a9d6b73ca2f387ffc4322419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:73:a3:fe:bb:73:21:97:36:b0:cb:f8:09:
69:4a:53:1a:4b:c4:65:87:8e:30:7e:77:f4:83:7f:
a0:e2:91:fc:9a:bb:42:6a:a7:0e:b3:55:f0:99:4e:
ab:3e:52:11:41:78:d6:9a:fc:28:33:91:22:86:1d:
15:da:9e:65:1b:48:cc:62:4e:79:34:ae:77:f1:be:
15:07:b0:98:15:fa:43:ab:12:d8:a8:ca:22:3d:15:
4e:82:9f:13:2c:61:68:59:47:ca:dd:e2:9c:51:41:
26:51:35:6a:c5:e7:da:0c:54:26:15:d8:19:3a:78:
8f:50:ed:30:53:2b:3e:b9:81:88:a1:ef:23:27:e7:
01:1f:87:aa:a4:a7:c4:6d:eb:a7:54:96:19:cb:a1:
66:cc:86:16:8e:12:08:83:a5:3b:56:4e:43:8e:56:
d5:04:a8:5f:fb:c7:9f:c8:8e:a8:90:ac:7a:bc:96:
6e:b4:dc:8b:4a:9d:79:cc:fa:80:64:5c:b5:00:1f:
69:b3:d3:43:59:30:e1:21:18:83:a1:43:61:b2:ce:
29:ca:ec:8c:91:48:6c:17:d2:79:c6:eb:b2:41:bd:
c5:39:35:a0:59:93:72:b5:75:b8:7e:80:6c:87:0a:
2b:14:ca:02:87:32:57:b0:be:8f:a9:9a:ed:2b:fc:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:5E:9D:68:06:DA:B3:A9:D6:B7:3C:A2:F3:87:FF:C4:32:24:19
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:23:72:29:1b:c1:66:d5:dd:74:23:b5:0c:b9:e0:ad:cd:
e2:86:7c:c1:8d:1f:20:0a:ba:ec:d7:3f:46:c6:e0:67:46:d4:
9c:cc:43:77:b6:3a:d0:19:78:6b:fd:bd:3d:1b:b7:47:9c:9f:
f3:18:8f:d2:3c:d6:29:0e:03:ba:64:29:c5:25:21:3b:3b:83:
d5:3a:30:32:99:2b:1a:70:a6:41:1d:81:ef:50:0f:4b:4b:c5:
39:49:b4:43:44:fe:bc:61:e7:51:2e:03:86:53:9e:18:7f:fa:
49:27:a7:e0:f7:02:ce:98:44:28:73:58:0e:c5:4b:33:62:67:
fb:c1:28:18:1d:4c:d1:c5:31:9f:2c:6d:31:d8:38:f8:88:4c:
eb:50:5f:17:18:9a:d6:99:4e:3f:f0:9b:99:9b:86:30:5a:98:
54:db:b0:ff:6b:3a:02:30:27:bb:4b:80:11:1e:94:55:34:e3:
97:66:8d:5d:a1:f2:03:69:f8:a2:13:d4:4a:05:4a:41:9b:69:
75:96:34:16:78:40:30:c1:e7:4e:85:54:41:ed:14:89:f1:b8:
02:cb:4d:4e:1c:8a:e4:5c:9e:c6:71:65:e7:42:e8:ba:39:96:
36:06:ef:27:a3:10:ac:f2:ba:cd:d5:20:70:04:8f:60:8f:9c:
d4:ec:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:42 2025 by rpki-client