Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: 0nBzKi/ofGym85uI/oqqCJnofkG39lAl3Q/Ied7OK8g=
Subject key identifier: CB:8B:1F:6A:E9:A0:85:EC:3C:E9:14:7A:82:2F:8A:FC:8A:1F:77:FE
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 0197470B7D3C04860A499E0453D8566C84F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 142C
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: pDxOgXT8hKVxGUJ7BEx3/BJgZEwGuXIcSrfhGvZY4dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7d:3c:04:86:0a:49:9e:04:53:d8:56:6c:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=cb8b1f6ae9a085ec3ce9147a822f8afc8a1f77fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:b7:f5:a3:ad:ed:82:f4:87:e2:2b:9e:bd:
b3:0e:f5:39:cd:16:35:20:0b:17:73:79:29:0f:8a:
ef:93:51:7e:b9:20:4e:0a:31:68:42:71:c1:86:e1:
4b:c1:a4:c9:fa:0b:e6:06:45:e6:1a:e4:74:65:f5:
46:57:1d:3d:0c:9e:c5:1c:c6:e9:c7:ab:ad:bc:93:
c2:2a:db:ee:5b:c2:7c:9a:ca:7c:0f:f8:f6:74:fa:
fa:6a:f4:84:67:9d:b3:9e:b3:2e:69:ea:cf:59:5c:
de:83:51:f9:7a:65:06:d6:7d:ce:93:fb:b5:59:57:
74:d0:83:cd:84:d7:4e:06:8d:ba:9d:91:ed:73:a0:
14:3c:cd:fb:8f:5e:4a:8e:dc:e8:dd:d7:e0:32:77:
63:b5:88:7b:23:46:b0:b1:95:48:aa:8e:4d:5d:b5:
d5:86:62:9d:0d:f3:45:9e:d0:2c:94:ca:91:e9:dc:
4c:29:ee:bd:3b:a6:c9:de:26:56:87:d2:f1:19:6b:
f4:5e:55:b6:01:c1:06:b1:11:6b:87:69:bc:f9:db:
c8:46:be:d5:f1:b5:c4:dd:81:05:e8:f6:9a:cb:1f:
3f:fc:c3:2f:29:b9:6c:b2:0c:a4:88:96:36:6f:1d:
e0:07:49:93:5b:62:58:9b:97:91:0d:de:35:c3:d5:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:1F:6A:E9:A0:85:EC:3C:E9:14:7A:82:2F:8A:FC:8A:1F:77:FE
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:73:eb:ec:77:44:7d:4a:8c:b5:87:8e:b4:e2:45:0f:2c:08:
90:d3:30:6c:ca:60:1c:9e:18:41:b7:1a:d9:03:4c:f1:0e:06:
ad:b1:21:4c:79:7c:aa:24:37:2a:91:78:91:5a:ae:ec:9d:67:
da:5c:0a:27:51:c2:9e:47:7c:e3:77:7c:e9:f5:16:4c:82:98:
ce:ff:b3:6e:46:ac:79:37:0f:c4:21:56:fb:72:81:64:d1:45:
ec:e5:7f:bd:40:d7:d0:3d:24:4d:d3:e8:7e:00:b4:b2:4e:e1:
be:42:68:d1:21:ee:ab:52:65:3d:31:16:42:ea:c5:ca:62:3a:
da:87:4e:38:8b:b4:01:5f:8a:2e:86:32:02:ac:41:30:50:cc:
e9:6a:0a:85:b5:0b:40:2f:7c:98:e1:c1:16:85:7f:8a:40:dc:
f1:6c:bf:a5:ff:20:b5:8d:b5:87:b6:95:48:5a:f9:22:91:97:
83:6a:d8:5b:f1:37:73:72:36:38:c9:4f:4a:4f:63:8f:ee:6a:
73:83:9d:f0:f6:e8:ea:de:04:00:8c:86:cf:47:f0:f6:26:ab:
52:22:d2:95:e1:09:b3:a6:69:84:c1:5b:60:70:7f:c9:98:d1:
c9:e8:20:93:fc:48:3d:ec:cb:d6:7a:ff:27:be:a4:b3:02:c9:
2d:a6:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:32 2025 by rpki-client