
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: oNETkKq5X/PP+lYtPjEOhJlNczEUPOMF8pB5qVT380M=
Subject key identifier: EA:3A:2E:D4:4E:A0:8B:B0:3D:62:3C:0C:9B:CC:61:B7:C2:00:F9:AD
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 0197507CD32F2C0D0760D3560572F845654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 17:00:47 +0000
Manifest this update: Sun 08 Jun 2025 17:00:47 +0000
Manifest next update: Mon 09 Jun 2025 17:00:47 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: MD4QJABgRAWQmDk1WC434zd4lWSU5Dym5bGD0RCNtl8=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:d3:2f:2c:0d:07:60:d3:56:05:72:f8:45:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jun 8 17:00:47 2025 GMT
Not After : Jun 9 17:00:47 2025 GMT
Subject: CN=ea3a2ed44ea08bb03d623c0c9bcc61b7c200f9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:69:a7:62:2a:26:3c:ad:a7:e9:ed:82:07:
13:a3:79:ca:be:94:52:3f:c4:3d:01:ce:0e:19:b5:
da:92:9b:11:83:7a:2f:10:63:59:19:62:79:9f:f4:
05:35:07:0b:0e:ad:9b:38:82:54:ea:0d:ca:a9:df:
b2:ff:f7:0a:47:10:34:09:5d:c7:c6:0d:21:8f:50:
c6:6b:97:a1:3a:9c:e5:fb:fd:c7:24:01:0a:0f:e1:
b8:3a:cd:e6:d6:cf:3f:b8:14:5e:81:9f:57:a0:5f:
ee:f3:e7:67:11:03:06:a3:ca:37:0d:f0:32:e6:cc:
4c:8f:34:d8:c0:3e:df:e0:32:0f:d0:fe:7b:9f:1c:
61:66:bd:23:e8:89:95:83:55:00:d3:b5:09:d2:2f:
d3:50:21:7f:cc:51:26:2a:ca:e5:57:e9:eb:9f:4c:
3f:6b:6d:0a:a5:60:f8:b8:0f:22:33:21:ec:69:11:
c9:bb:ee:b4:87:da:5a:37:44:de:b2:82:1e:f5:2a:
29:04:c1:54:0f:b0:41:2a:d4:17:5d:6e:bb:eb:96:
e1:93:d4:cd:6d:06:87:12:cd:5e:a9:5e:2a:a6:23:
1e:ec:75:0d:08:cf:37:b9:a7:37:b7:50:c7:85:96:
24:a2:17:d5:19:4c:75:1d:61:a5:c5:fe:1f:cc:5b:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:2E:D4:4E:A0:8B:B0:3D:62:3C:0C:9B:CC:61:B7:C2:00:F9:AD
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:da:e3:65:9c:76:1a:f5:b3:85:aa:b1:3c:14:95:f1:a8:
d0:6b:c7:08:37:df:86:92:ce:fc:40:91:41:2d:d8:78:12:6a:
bc:2e:12:18:5f:c7:55:e1:8f:86:fc:38:7b:4f:4f:0f:54:97:
fe:36:6e:5a:39:0e:e4:4b:b4:da:58:6c:6e:ad:a8:10:d0:1c:
9f:87:75:01:4b:5e:97:bc:e1:de:6f:1e:79:f0:a4:b0:8f:9f:
6f:ac:eb:94:28:7b:7b:e0:86:d7:21:e2:4b:cc:50:78:e5:52:
0d:b8:7c:46:ef:10:7b:dd:84:d5:bb:04:9b:b3:61:5a:65:78:
81:28:58:9a:9b:72:ba:1f:60:7e:a9:79:53:08:24:62:09:58:
34:4e:f1:11:6e:b0:de:72:db:38:d6:8e:9f:9f:04:21:39:ea:
7f:d9:78:9f:80:50:72:94:da:8f:2e:06:07:e3:fc:98:8e:24:
e3:74:67:cd:ca:e6:97:16:33:76:84:45:bf:a2:2b:b1:63:0d:
21:79:f5:71:6f:34:f6:f6:1a:59:2e:92:9e:c4:5f:35:7f:d3:
4c:52:7c:c1:4b:3b:7d:3c:1f:d2:cf:c8:07:0e:e3:16:1e:4d:
bf:99:07:9a:de:06:93:33:7a:79:89:b8:c3:f3:61:7f:c1:84:
44:0d:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:50 2025 by rpki-client