Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: s+uedyeF9nsx/FlqXRmEG0BPVDKK5/f9rwK06Fx6894=
Subject key identifier: 8E:A3:90:C8:EA:CA:D7:98:09:3E:7D:A0:16:0A:15:FE:09:68:21:E5
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 01974D44AEB31222C2C950526FDA8BB7717E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 145D
Signing time: Sun 08 Jun 2025 02:00:36 +0000
Manifest this update: Sun 08 Jun 2025 02:00:36 +0000
Manifest next update: Mon 09 Jun 2025 02:00:36 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: oOzNKEN48ri4KxyoP/bvcFi+8SFbbYl0K5L/5spuf58=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ae:b3:12:22:c2:c9:50:52:6f:da:8b:b7:71:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Jun 8 02:00:36 2025 GMT
Not After : Jun 9 02:00:36 2025 GMT
Subject: CN=8ea390c8eacad798093e7da0160a15fe096821e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:b0:a8:d5:10:db:2e:ad:f4:d5:ad:d3:aa:
3c:44:7b:89:5e:c4:32:44:1f:7c:f6:50:51:bd:a1:
6e:d9:4b:06:62:19:32:16:94:52:f9:2c:b6:0b:66:
c1:d8:69:98:35:84:de:4f:82:83:bd:53:af:94:9a:
ce:d4:1c:ad:99:cb:99:4b:11:9c:f3:23:18:b6:4c:
0b:30:d2:9c:6a:9d:c2:87:ba:23:07:97:26:7b:81:
fc:3b:1e:16:6c:d3:a7:bf:ad:d3:44:3d:3f:cb:19:
cc:6d:c7:d5:1d:f6:f4:eb:08:78:ce:3a:b3:51:21:
66:f1:e8:a4:59:6e:bb:bc:c1:ca:27:b0:d0:7f:c2:
22:56:e5:26:df:94:1e:d4:b5:75:df:de:ba:99:97:
19:60:8a:ab:e3:da:0e:ab:3d:f7:55:b0:b4:23:f3:
66:d1:5c:75:04:22:b1:2c:7d:5c:a6:93:6e:e2:84:
d9:cc:72:05:c2:72:e4:bb:66:4f:53:fd:90:e0:d0:
7d:f8:e2:83:20:bc:1b:bd:a6:af:b4:8f:7a:5f:d6:
7b:22:19:37:36:94:97:53:f2:95:fc:72:8e:9a:2e:
63:04:33:a6:cd:5c:73:32:00:87:ed:c5:b9:56:1d:
17:6f:40:9b:fe:f1:da:ed:cb:3c:e7:60:c0:ee:54:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:90:C8:EA:CA:D7:98:09:3E:7D:A0:16:0A:15:FE:09:68:21:E5
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:f7:0e:e8:7f:d6:06:b8:e0:de:59:0f:90:f5:08:f2:45:
63:1d:50:be:c4:80:f4:84:32:9e:a1:b0:06:7e:e6:f1:ff:ee:
6f:64:28:4f:c6:a7:7d:11:f6:23:30:05:79:0b:1a:47:dd:53:
a1:1b:0c:b9:c3:ef:a2:d7:dc:8f:9a:30:70:68:3e:f5:5e:d9:
81:48:8b:0f:a1:ad:e5:d9:66:e1:2a:c3:82:50:7a:46:15:6e:
af:10:be:b2:fa:49:88:42:5f:3f:38:c5:7e:23:a9:f4:61:71:
8f:8f:49:3b:a7:ca:f9:fd:1d:07:40:96:7d:76:f4:a3:e6:bd:
79:79:6c:57:fc:b0:9e:4a:19:49:8e:1b:18:63:53:d4:1f:7e:
4a:4f:32:41:8f:ba:06:89:bb:b4:be:9c:de:28:f0:93:9e:41:
2c:ef:e6:18:be:37:3e:36:52:db:b8:f0:23:98:7c:c0:fa:f1:
59:9d:db:20:ac:93:40:b1:f4:42:b4:2e:13:34:19:72:d3:63:
f4:49:6a:a2:97:1d:83:3c:9c:16:e3:78:c0:b1:82:71:74:98:
5c:84:4e:6c:f6:60:88:98:cb:9d:b5:a5:ce:12:0d:8b:82:d3:
01:c8:12:20:51:34:2a:fb:4f:f1:28:c8:9d:78:97:48:1c:47:
df:c6:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:34:44 2025 by rpki-client