Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: OIkgERJZq0N6mXAmntREMP7PLyDT4eBG47zUSH2ZrSw=
Subject key identifier: D3:21:DD:D1:59:67:9C:8B:87:50:E5:0C:74:0C:CE:95:D6:51:5A:CA
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 01974A7B402DB6CE7DB777209C7720C20608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 053A
Signing time: Sat 07 Jun 2025 13:01:20 +0000
Manifest this update: Sat 07 Jun 2025 13:01:20 +0000
Manifest next update: Sun 08 Jun 2025 13:01:20 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: fvy/Gqxbu+QvCpHC9PC1HAb76LakFSk0qubmhiW1P9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:40:2d:b6:ce:7d:b7:77:20:9c:77:20:c2:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jun 7 13:01:20 2025 GMT
Not After : Jun 8 13:01:20 2025 GMT
Subject: CN=d321ddd159679c8b8750e50c740cce95d6515aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:fa:39:00:63:f1:79:d6:9b:26:5a:62:84:
04:bf:02:b1:38:b6:8b:60:c3:e3:74:c0:82:62:ab:
4d:68:be:92:fd:58:53:63:98:da:34:bb:a2:7f:cd:
36:29:6c:5e:85:a0:3a:02:6c:e3:7a:ea:84:e4:eb:
e3:db:b3:26:3f:62:a9:2f:78:e2:01:7a:1d:6e:60:
f2:77:55:ac:8f:69:0b:68:c3:78:7e:bf:aa:be:00:
65:e5:75:31:64:07:c4:86:d0:63:f9:2e:aa:e3:9e:
c5:fb:f3:c3:82:ad:d5:de:cf:11:bb:71:63:72:00:
c7:bc:c2:4a:ba:ee:40:5d:44:89:c6:62:8c:58:b0:
89:b6:95:8c:1f:fa:c7:ea:71:c9:f4:e6:b9:9d:fe:
4a:c5:1d:69:d0:6a:c7:05:51:dc:f4:1f:b1:32:1a:
63:37:61:9b:9c:43:d2:cd:a8:5e:12:5d:59:66:da:
a0:c0:74:84:8d:07:c9:6d:7a:7d:2e:bc:bb:4c:e7:
45:da:e2:3e:62:44:3c:52:a2:a4:1c:74:48:70:fe:
75:78:35:19:d2:0e:c8:ab:cc:bb:e6:51:d3:d8:1f:
cb:d0:19:39:1e:fb:71:bc:cd:fd:3b:e8:69:e7:ad:
58:bc:d8:63:c2:d0:71:59:db:7c:b5:1f:c5:9a:ec:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:DD:D1:59:67:9C:8B:87:50:E5:0C:74:0C:CE:95:D6:51:5A:CA
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:fa:f1:fc:a7:99:00:55:90:4c:7b:d1:b0:f1:9e:bb:53:
20:22:2b:c1:c3:f3:24:8a:1c:ba:05:8c:1a:26:bc:14:31:cd:
bb:38:6f:2c:55:a0:4f:37:c9:63:b4:95:4e:8d:37:e1:40:74:
98:3a:e9:04:c6:55:c8:0a:4c:1a:b6:c3:81:10:2d:56:58:d3:
77:09:b2:c0:c2:bd:34:1c:13:91:ba:e8:89:33:5d:e3:25:f6:
46:e1:c6:65:4c:79:9d:3f:a2:2c:7b:6c:99:a9:cb:c4:9b:c3:
31:a1:d9:a0:1d:79:fd:11:c1:04:89:42:ed:e9:85:38:98:11:
2e:49:f9:90:ef:cf:0d:98:27:b0:b1:c5:8c:33:6a:83:35:3b:
9c:28:03:ac:02:6e:8c:0d:84:6a:e1:28:91:51:71:79:fd:7e:
0e:3d:b3:8e:35:10:a2:18:f8:56:78:bd:1f:88:cb:62:c3:98:
af:99:e3:40:fa:e8:5b:bb:2d:a6:fa:46:fc:d0:42:22:f6:09:
a1:01:70:cb:5a:3c:c9:1a:a6:2f:14:0b:16:cc:9d:54:7c:60:
65:00:00:3c:42:4a:88:92:c1:db:20:93:56:76:23:5f:33:21:
a7:c3:6d:2e:e0:77:28:11:e6:e8:fe:8f:68:69:c1:ba:19:e2:
d6:73:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:07:54 2025 by rpki-client