Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: gMhKiYKBERH5c11hZoqm2i5zF5kqDyNnUIz9gxB1y2o=
Subject key identifier: 83:0C:66:13:C6:5D:6B:E5:4C:A0:5C:12:68:76:38:DD:3C:74:EA:6D
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01975EA64896F07BA01606688ADBEF77AE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 11:00:45 +0000
Manifest this update: Wed 11 Jun 2025 11:00:45 +0000
Manifest next update: Thu 12 Jun 2025 11:00:45 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: cYBUHuhfI96M/DJkExJJGEym7HGqkA96JWP/LFG5kHs=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:48:96:f0:7b:a0:16:06:68:8a:db:ef:77:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jun 11 11:00:45 2025 GMT
Not After : Jun 12 11:00:45 2025 GMT
Subject: CN=830c6613c65d6be54ca05c12687638dd3c74ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:97:b7:76:3f:cd:b9:0b:c5:ba:15:45:da:
8a:e3:fa:ca:ae:40:db:2c:36:09:18:49:58:57:a1:
20:86:2f:42:61:12:64:e5:85:a3:12:46:02:9b:45:
a1:2f:05:2a:ff:d8:aa:b1:46:fe:65:64:f7:ab:67:
6f:60:c0:10:07:dd:97:9d:44:c4:85:60:e4:dc:82:
a8:1e:c9:c1:47:90:af:92:82:cc:14:d0:30:52:9b:
ff:d2:30:2f:f5:65:6c:00:51:00:ef:89:3c:5f:22:
f8:9e:bf:a4:85:8f:6e:31:76:88:f6:46:c3:f2:a6:
65:2d:d2:04:7a:e1:41:1a:64:29:fa:09:c0:f2:9c:
89:37:69:f4:76:8d:95:09:28:6a:4c:15:1a:ac:f1:
db:23:76:bc:27:10:69:7e:23:7a:a0:48:73:fd:fd:
bf:cb:42:21:bb:64:06:3c:0e:c4:d2:82:f3:c7:ac:
36:cd:c1:02:d3:03:cd:62:ef:38:b9:4c:ff:73:5f:
1e:13:f1:ec:34:4f:90:87:5f:61:f4:74:ae:4e:23:
45:ef:7a:bb:b7:1a:d5:21:99:ee:1c:9e:f2:bf:8e:
3d:e7:3c:10:7d:50:b6:42:f0:95:c1:9e:e9:6a:c1:
f8:39:b7:d9:fb:c7:50:51:83:6b:c6:ea:15:c9:72:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:66:13:C6:5D:6B:E5:4C:A0:5C:12:68:76:38:DD:3C:74:EA:6D
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:29:4f:97:d9:63:06:f2:ef:62:82:86:9a:f2:f3:51:d1:a8:
61:d3:47:68:d6:66:3c:c6:9a:60:72:87:8c:3f:7a:78:91:4b:
68:3b:7e:ea:c3:40:4b:95:16:c1:7c:ad:cb:ec:00:82:99:9c:
ee:41:77:13:62:8d:62:ee:d6:b3:b7:08:2c:6d:35:27:6b:67:
88:58:f4:07:89:41:e6:ed:7e:fe:1b:70:6f:45:6b:27:77:0d:
c5:41:fc:f6:5c:57:aa:17:5b:43:43:29:aa:af:82:97:ef:b7:
76:9b:c5:1f:c0:a4:85:6e:40:7d:40:57:15:e0:48:f0:d4:da:
ad:a2:61:16:11:3a:84:83:6b:76:53:20:73:68:4f:6f:21:8f:
ac:6d:88:4b:ba:b3:7b:dd:cc:21:63:ca:ca:d8:96:c7:d2:d3:
bf:cc:71:85:1d:19:ae:c5:8e:50:44:da:2e:4e:21:ef:7b:54:
78:0b:56:f6:a3:39:ec:ef:5e:07:92:36:ed:92:5d:d6:cd:61:
94:25:b7:f2:9e:ac:ca:c8:fb:33:a9:49:af:98:26:ee:52:3b:
b4:ef:55:2f:5d:d6:a5:fe:5b:0d:87:05:22:b5:2a:5f:9c:e0:
71:a2:ac:b9:43:8a:43:82:10:a0:05:c6:2f:b6:4e:cb:b9:64:
4b:ed:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:12:07 2025 by rpki-client