Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: fcQ+VpAD8wYT3NHdB5bE/vcq6lsBygWm6t6nK752Cl0=
Subject key identifier: FE:86:F0:D8:8F:13:2D:16:42:A7:B5:4E:BF:7A:6F:F4:DE:A5:BC:27
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 01976403E37530E6C38DF807191512F6454E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 150D
Signing time: Thu 12 Jun 2025 12:01:05 +0000
Manifest this update: Thu 12 Jun 2025 12:01:05 +0000
Manifest next update: Fri 13 Jun 2025 12:01:05 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: fYKaVhObIZDcKFDitrJiU2gElg0kXO5YOGGsANwYNAQ=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:e3:75:30:e6:c3:8d:f8:07:19:15:12:f6:45:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Jun 12 12:01:05 2025 GMT
Not After : Jun 13 12:01:05 2025 GMT
Subject: CN=fe86f0d88f132d1642a7b54ebf7a6ff4dea5bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:5f:66:51:2b:88:24:7e:ff:5b:c7:d0:21:
74:11:3b:f4:b8:b3:f8:c6:c6:99:b3:54:6c:b4:0b:
b0:e2:d9:54:53:46:04:99:42:c6:93:77:2a:6c:53:
ca:ad:63:79:ea:8c:22:fc:82:18:45:95:d6:7a:f5:
eb:18:52:41:72:4a:20:06:f7:e5:de:9c:93:0e:5f:
a8:20:88:ff:a2:2d:93:32:69:93:8e:b8:b7:eb:b4:
82:77:ee:b1:43:58:34:a7:dd:70:ac:16:2a:2c:53:
57:ae:ef:d2:d5:26:4c:01:a4:fc:5d:ef:bd:e0:fb:
ed:d2:71:ea:e4:29:14:35:11:aa:bd:8f:39:26:c9:
01:a8:95:16:b2:06:1c:22:0c:c9:29:00:7c:b4:01:
20:d1:c5:89:58:0b:e5:aa:37:6b:e2:50:8e:ce:f8:
81:85:52:42:c5:e8:a4:df:a4:b1:4f:16:24:50:d2:
39:00:f5:65:39:e0:4b:fc:97:a8:0d:68:fc:59:8b:
ae:99:92:22:86:7b:6b:7f:22:a3:01:12:fe:22:d5:
43:47:ee:f1:2b:09:3d:6d:ee:4c:11:28:90:ea:f9:
92:2a:7a:8c:a6:63:a4:bb:01:75:8e:d2:95:b0:98:
6c:21:7f:a5:f3:f5:62:16:f9:4c:bc:23:88:0b:c5:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:F0:D8:8F:13:2D:16:42:A7:B5:4E:BF:7A:6F:F4:DE:A5:BC:27
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:8c:02:df:4a:eb:37:37:81:4c:62:3e:dc:37:b3:30:99:
96:63:c2:bd:fe:89:11:e0:d4:1f:94:a5:c4:f4:03:ae:c2:f5:
b8:8f:dc:bd:99:e0:a5:1a:3a:d9:c5:66:8a:2e:f5:da:f2:03:
5a:a6:b2:ae:9b:cd:9e:7a:23:c8:3c:86:26:62:38:2f:35:36:
d4:52:d1:ab:6e:f6:a4:56:46:34:2c:ea:00:a8:50:be:5a:96:
53:d8:e0:0c:84:9b:1a:97:ec:3d:ed:65:2c:76:cd:01:b9:9f:
aa:46:4e:d0:42:67:bf:97:13:d4:c9:35:5b:69:c4:cd:01:36:
7a:c3:ff:31:a1:15:82:9e:20:03:8c:14:1e:60:10:8f:a9:77:
ac:13:06:8d:24:6e:73:40:cf:f1:5c:35:8e:cb:63:04:ee:b7:
22:4f:4f:4d:5a:4b:cc:99:21:3b:ba:08:4c:48:c9:b8:47:36:
bb:1d:44:05:8f:50:5c:01:1f:9b:42:ea:22:3e:2f:de:85:a5:
59:d3:e1:ec:71:ed:b5:de:5b:67:97:a2:e3:91:20:8f:6b:63:
e3:13:ef:df:27:01:cc:8c:b4:ea:59:25:ee:68:a7:a0:2a:b4:
f4:3d:0d:e2:05:bf:0e:7a:eb:b3:e7:b9:94:ae:e7:72:ee:d5:
ca:1a:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:41:25 2025 by rpki-client