Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: xErU7OWmQii4eD8eWcmGz1vYEp/7WuQtIM+g7mlVw2g=
Subject key identifier: 0F:B0:CF:34:DC:56:B1:E1:93:A9:25:03:DB:8F:E5:8A:12:F5:24:2F
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 01974A0C963B578E2015620701137B4B6377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 11:00:28 +0000
Manifest this update: Sat 07 Jun 2025 11:00:28 +0000
Manifest next update: Sun 08 Jun 2025 11:00:28 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: qbdedVvolWqji0QG6Nzg3jmlIkoalz8xNgpCP0rbFZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:96:3b:57:8e:20:15:62:07:01:13:7b:4b:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Jun 7 11:00:28 2025 GMT
Not After : Jun 8 11:00:28 2025 GMT
Subject: CN=0fb0cf34dc56b1e193a92503db8fe58a12f5242f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:99:41:72:0c:d0:72:64:36:dc:b6:27:3a:
0f:af:8d:51:82:3b:02:45:65:cb:c5:e7:8b:aa:d6:
f6:5b:ac:9f:fb:7b:34:d9:ef:9b:13:6c:e6:9a:dc:
c2:38:25:f4:f3:18:bc:42:d6:1d:89:0d:1a:35:b3:
78:e8:14:f8:c8:fa:a2:fb:12:55:83:11:c3:57:cb:
b1:97:dc:18:de:a2:69:fb:6a:aa:9f:f6:9f:3c:e9:
d1:fa:8d:91:f4:c4:f7:6f:e7:28:68:35:b4:36:37:
ff:26:83:94:f6:f2:91:6f:e3:d1:be:b4:74:61:63:
65:92:04:0b:f2:47:f2:d0:9a:5f:f5:22:b3:60:3d:
d2:33:a0:7d:cb:99:4b:af:c3:54:9c:db:67:1a:c3:
58:69:11:53:ef:5c:aa:01:d0:4a:a2:2a:5f:62:d1:
52:64:f6:2c:e5:0e:77:31:be:91:d1:60:9a:5f:34:
73:14:ad:6c:b0:cd:c5:ac:31:2c:88:a8:3e:c1:a9:
1c:20:29:75:57:78:7f:3f:8f:09:9f:30:1c:04:14:
8e:4b:2d:b2:96:ed:fb:83:97:fc:14:df:5d:e2:f9:
4b:1c:6e:fd:ea:75:3a:28:24:45:11:dc:22:1e:97:
b2:9c:c6:8a:be:97:3f:6f:ff:4e:59:a4:5b:e5:46:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B0:CF:34:DC:56:B1:E1:93:A9:25:03:DB:8F:E5:8A:12:F5:24:2F
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:b1:6a:b1:a3:81:8a:7a:73:18:83:96:3f:8b:05:dd:b5:
a0:c1:b7:0c:50:d3:f1:78:8b:ed:91:17:45:45:32:ea:25:81:
a0:a4:99:b0:e6:05:49:99:c3:4e:74:94:93:33:27:89:95:a6:
f8:55:78:a0:c1:5e:75:c3:9f:78:e0:22:ef:c4:2d:60:a7:46:
88:34:d2:04:0e:15:45:a3:95:52:50:ef:9b:bd:e7:43:d7:f6:
9d:3d:0d:c9:39:6b:2e:87:65:64:74:ed:00:2c:60:a8:d5:e4:
65:15:f3:70:71:36:83:b6:0a:49:20:e8:b3:4f:c6:d9:97:5b:
93:ee:bd:c2:f5:c3:bc:89:05:bf:32:0a:37:d9:aa:85:bb:4e:
a1:ac:18:97:8c:5b:77:2c:61:3c:1a:26:d2:1d:97:c8:ca:07:
01:61:8d:26:19:85:c3:e3:7e:53:91:26:7b:a4:76:3f:76:97:
62:91:65:9d:c2:66:87:37:72:b7:7a:3f:3f:09:60:e8:b4:b2:
ff:d6:43:a3:86:8f:91:dd:0c:64:ad:f5:77:19:bf:9a:f8:9b:
47:f7:8e:37:35:5f:9d:fe:5d:50:5a:96:c2:ea:6e:7d:92:cc:
a5:81:f2:9f:46:2c:d3:b2:be:6d:47:33:49:a9:46:ed:18:e7:
33:31:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:20 2025 by rpki-client