Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: 1MZrysF5slDEsi+nqJMpKzbpcJSFobHWo5r7NuhjaUw=
Subject key identifier: 4D:79:C4:5F:0D:DC:B3:F6:DE:1D:0D:F2:1C:AE:2E:45:E8:A7:A2:7C
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 0197CBDEA7A38B476890F7A3EEACDA4CBF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 0617
Signing time: Wed 02 Jul 2025 16:00:56 +0000
Manifest this update: Wed 02 Jul 2025 16:00:56 +0000
Manifest next update: Thu 03 Jul 2025 16:00:56 +0000
Files and hashes: 1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: wd+MhMJrKt3/YL+tKO1nMSL5+caCzEGzwd5uq4oUIjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:a7:a3:8b:47:68:90:f7:a3:ee:ac:da:4c:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Jul 2 16:00:56 2025 GMT
Not After : Jul 3 16:00:56 2025 GMT
Subject: CN=4d79c45f0ddcb3f6de1d0df21cae2e45e8a7a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:f4:e4:79:58:76:f4:23:fd:92:20:1c:c4:
91:a1:c1:a7:dc:ff:ef:bb:ba:55:ac:23:28:e6:21:
16:7b:42:0c:33:63:87:96:ac:0e:0c:56:70:87:53:
cf:f5:6a:ac:e5:9b:ea:38:1e:92:3b:3c:b7:57:69:
90:ea:5c:42:ce:ce:84:da:a8:bd:45:1a:8c:0d:c2:
0c:96:9c:fc:59:39:05:be:25:e9:14:41:01:16:83:
34:34:ff:90:80:28:7b:e6:78:6b:0c:19:a7:e2:c1:
29:41:a0:67:5a:18:a2:84:66:55:0d:af:fe:86:1d:
d2:b2:8f:a8:3c:fd:df:83:40:95:3e:79:e1:f5:8a:
fa:da:a4:d9:a3:1b:19:38:cd:66:80:83:ea:6a:20:
bb:81:c2:15:74:45:04:98:c3:09:1b:de:ec:83:fd:
8e:57:23:08:65:d3:13:52:29:5e:61:e1:5b:7f:aa:
38:61:3c:aa:80:db:c8:69:b0:27:ff:33:83:71:b7:
72:81:c2:89:39:53:3f:7d:6d:96:c0:60:10:66:84:
17:9d:fa:37:34:10:17:db:f9:db:5f:0e:c8:15:a8:
95:87:42:94:26:6e:bd:9d:36:77:22:b0:6a:cf:ff:
37:6e:b7:92:5a:ac:29:7f:78:95:ae:03:c5:4a:bb:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:C4:5F:0D:DC:B3:F6:DE:1D:0D:F2:1C:AE:2E:45:E8:A7:A2:7C
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:03:fb:4f:44:6a:43:03:91:ef:73:c3:7d:55:0f:7b:7a:
11:a6:aa:bb:b6:76:82:da:8d:3d:84:f0:59:62:72:e2:ed:76:
0e:4e:2d:b8:c4:a0:e6:18:ae:02:60:96:b1:20:ee:86:cc:7c:
41:a7:cd:39:0b:7b:0b:3a:9a:f7:f1:d0:7d:bc:c8:86:10:6f:
bf:aa:a9:46:24:2e:f4:37:56:08:4c:e8:2d:99:24:1e:a0:83:
20:aa:6a:7a:7b:76:9f:48:f1:d3:c1:bd:31:3f:3b:7b:34:54:
44:3d:e5:94:d5:c1:65:65:50:b5:2d:e5:24:76:5e:9f:21:12:
df:67:e0:c8:f2:35:b5:9f:0d:7e:09:d0:74:93:bc:af:93:97:
5c:77:55:b4:5b:5c:82:70:5b:16:f3:2d:a3:69:74:a3:74:bd:
36:56:9a:2f:6d:86:0d:5b:14:6e:a4:a4:8a:49:7e:15:26:cf:
43:64:c3:ad:86:20:a6:0b:e5:d2:d2:a7:93:22:54:f1:ee:e8:
e3:a5:d3:18:0d:d2:0c:53:ce:ab:da:11:66:cf:70:91:46:2f:
65:a4:c9:bb:1a:e8:7b:c1:33:d3:82:74:d7:af:c7:a0:b8:3f:
f8:9a:6d:be:d1:f8:01:d7:f6:75:5a:32:34:18:5d:7e:f7:db:
d6:ad:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:56:40 2025 by rpki-client