Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: 5wH0BWCGVjtK4OOtfizY5lnwkudKRPt3ZyeTlt9Rmqc=
Subject key identifier: CA:95:F1:8D:A8:25:02:5B:75:50:3B:E3:08:DA:4B:66:0E:23:F7:56
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 019748FA43832366966F94CE012A580C4497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0BF8
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: 3zGU5ALYaTAPOW0EGaSjS4LgBpfi3L9g8JS0cP+DPqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:43:83:23:66:96:6f:94:ce:01:2a:58:0c:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=ca95f18da825025b75503be308da4b660e23f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:bb:9e:e3:1f:6d:1e:be:59:7b:00:e1:1d:
05:df:b5:1a:7c:3e:32:78:95:a9:48:d7:1f:da:2a:
1b:81:58:ed:89:0f:99:85:92:38:bf:97:25:b5:d5:
49:04:00:24:1b:be:ea:92:f0:14:ee:b6:b7:61:f8:
47:07:c1:b5:6b:b7:b8:92:76:56:9c:63:b4:d9:22:
68:c9:d8:61:c2:af:12:99:78:cc:b8:c9:82:46:53:
bc:89:a0:39:47:ba:9d:f2:27:88:f7:f4:c0:6f:c0:
a4:a9:d8:aa:87:67:3e:fe:26:0b:df:51:5b:9c:dd:
9a:2a:36:68:5c:fe:dc:a0:73:8b:dc:65:79:90:bb:
69:6c:2a:3d:b5:91:1c:68:b3:a4:bc:ce:1c:aa:b1:
bd:db:f5:9a:76:06:87:bb:41:10:da:af:61:6f:73:
40:48:f2:48:ce:b6:b3:70:4b:f3:8e:37:7f:da:d2:
40:6d:1e:cd:10:89:08:6c:c0:f1:69:01:4b:68:a9:
44:2f:81:f5:84:f0:af:4c:e2:78:06:4b:b4:85:32:
88:dd:ae:d7:c6:b7:4b:4f:43:24:2f:f2:96:e8:da:
da:41:34:eb:f8:ef:c9:58:19:bb:b3:fa:e5:f5:cc:
0f:46:dc:04:42:6b:90:17:33:7b:2c:de:bf:49:94:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:F1:8D:A8:25:02:5B:75:50:3B:E3:08:DA:4B:66:0E:23:F7:56
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:6e:64:32:b1:bd:30:f3:fa:77:32:35:ef:72:b0:b4:d1:
e9:24:de:31:cc:86:e9:cd:e1:86:d0:53:82:a3:5a:32:b1:28:
76:1e:75:d6:e6:cd:e5:e1:7a:55:af:33:7c:75:3d:11:ea:90:
3d:bd:d5:a7:10:d7:37:bf:b9:79:b0:62:b4:39:49:2c:10:1e:
23:d3:86:b8:f8:e9:76:db:f9:06:04:0b:91:58:b3:75:1c:4a:
dd:a2:e8:96:cd:8d:31:f7:9d:f3:d1:47:73:be:45:fb:e0:02:
67:f5:85:5d:8f:df:c3:cf:45:3b:16:6b:bd:b7:55:a1:99:46:
07:87:46:1a:1d:dd:63:8f:2d:88:27:09:97:67:86:b6:fb:85:
3e:57:6f:34:ce:e4:22:25:92:95:49:c9:88:3b:75:ad:6b:57:
2b:43:f9:da:ef:c5:d2:3d:7a:ae:45:0e:d6:2b:6b:c9:eb:f7:
8e:78:c4:c9:d2:8c:cb:ca:c9:46:1a:b5:9d:44:39:4a:c0:ff:
c2:f1:bb:74:64:26:c7:cf:e8:7b:19:50:69:0e:bd:30:11:99:
0e:63:0e:e3:cd:a2:f3:07:c4:f7:98:32:f9:67:71:ec:bf:15:
50:58:d0:0d:f9:69:d5:ca:83:ed:65:b6:e4:b6:19:94:f4:f3:
ab:b1:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:01 2025 by rpki-client