Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: 9nwmyXWyJEukLyPkrPVkxhmpGNtq2hx4AWgx4jaY08I=
Subject key identifier: B5:32:4C:F2:11:3F:5B:1E:88:05:0C:40:6A:3C:3D:4C:73:8E:CD:04
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 01974A43EC35240FA224590131B4044B77A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 12:00:54 +0000
Manifest this update: Sat 07 Jun 2025 12:00:54 +0000
Manifest next update: Sun 08 Jun 2025 12:00:54 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: +F65Vk6n03lVnGscTeP52ao91bNSHBJVGLzrwynR+4U=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ec:35:24:0f:a2:24:59:01:31:b4:04:4b:77:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Jun 7 12:00:54 2025 GMT
Not After : Jun 8 12:00:54 2025 GMT
Subject: CN=b5324cf2113f5b1e88050c406a3c3d4c738ecd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:f5:cf:24:23:01:67:5e:b3:05:50:0d:65:
32:5c:f5:75:cb:0c:a0:c7:23:b7:97:96:11:c7:70:
e5:2a:89:78:6e:a1:40:bb:97:9c:54:25:5a:bc:79:
78:55:59:11:33:48:08:23:18:39:51:ac:64:71:d9:
1f:a8:0d:c6:b1:34:97:34:b5:59:b4:58:c7:c3:5b:
9e:4a:be:4d:28:af:33:d8:09:1c:78:94:7f:7d:e9:
5a:1f:74:20:19:03:92:57:43:a4:45:c3:ce:34:72:
97:69:da:ea:53:3a:92:a1:c0:37:2f:17:cf:49:48:
18:e8:df:6e:52:da:e3:77:f3:97:6e:99:7e:97:7a:
43:16:25:54:62:06:c9:dd:1a:0f:93:43:68:f0:08:
a0:90:d4:ad:4b:d4:57:1d:e2:37:ff:e8:ee:7f:24:
1a:c7:74:14:1f:bc:3f:39:6c:16:47:bd:46:0b:e9:
be:7b:55:fb:65:45:46:a1:b6:44:30:5a:3b:37:a4:
19:3b:e0:74:bf:c1:67:4e:a9:72:71:71:5b:63:a3:
22:4b:da:6f:62:3a:89:ee:16:02:ee:62:3f:7b:10:
c6:23:3c:98:05:8b:37:33:b5:7f:e8:5e:e4:93:e9:
02:7b:01:ea:3c:ef:86:12:c9:b1:12:d1:b1:72:d8:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:4C:F2:11:3F:5B:1E:88:05:0C:40:6A:3C:3D:4C:73:8E:CD:04
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:61:d6:1c:d6:1c:91:ab:6d:29:e7:b0:7c:f2:19:da:8b:
b7:15:f7:10:d4:ad:ad:90:95:25:8e:d8:2b:7f:b0:b9:4a:85:
12:54:a7:76:d0:f9:b8:f7:d2:f9:13:05:d5:ea:35:25:10:44:
59:73:21:e4:e2:c1:0c:bc:1a:6f:ed:65:db:cb:16:68:51:24:
3e:66:0c:0e:9e:b7:be:c0:b1:79:99:14:19:15:63:b5:e6:b5:
5c:cd:52:fa:87:e4:e1:a7:ba:1c:68:0d:86:a8:15:29:b4:54:
23:36:1e:ff:d0:40:4b:83:80:a2:c9:ce:f0:76:ce:33:7a:16:
87:1e:af:ec:69:4d:ed:f6:be:30:61:90:bc:f8:c6:fa:62:e8:
d4:80:39:72:32:09:96:c3:70:24:16:ee:cf:78:f5:8d:e4:a2:
6d:64:30:00:89:48:16:bb:d5:0e:3b:c5:82:9f:2b:4e:16:fc:
ca:45:72:d8:cf:e1:52:2f:f7:79:e6:e7:b4:bb:22:1f:3f:b8:
cc:37:c1:30:75:88:1d:53:18:6b:0a:9f:5f:9b:b8:dd:48:e9:
e3:df:79:57:62:f0:0d:2a:e5:cd:98:40:af:63:f0:1f:ff:b2:
11:83:43:8c:9d:fb:4c:d3:46:2d:c1:49:d1:90:70:96:c0:7e:
9b:22:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:31 2025 by rpki-client