Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: wvZT8IP6ZZL0uw3ALNeOQGFOj3QQgjvUaOBs+CXdhNA=
Subject key identifier: 6A:C0:3F:C4:EA:55:3E:B2:52:64:D4:AD:F4:10:25:33:91:72:A5:03
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0197474251C1C0530DCE1834135F5A121360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 118B
Signing time: Fri 06 Jun 2025 22:00:17 +0000
Manifest this update: Fri 06 Jun 2025 22:00:17 +0000
Manifest next update: Sat 07 Jun 2025 22:00:17 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: auRF4ySxJYH3Mi/shL43cExQ+p7Yp2PsmeoGGkjA1zQ=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:51:c1:c0:53:0d:ce:18:34:13:5f:5a:12:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jun 6 22:00:17 2025 GMT
Not After : Jun 7 22:00:17 2025 GMT
Subject: CN=6ac03fc4ea553eb25264d4adf41025339172a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:23:49:4d:0a:dc:ac:1d:c8:77:f3:b1:67:
38:a8:c7:c6:56:b4:6e:22:36:c6:7f:d9:32:5d:94:
f9:a6:2d:18:51:fc:7a:53:aa:b4:74:c5:3f:9c:b9:
01:23:3c:30:c3:da:31:67:3f:00:68:2d:99:38:37:
53:a3:10:c5:90:39:dc:7a:a0:68:91:da:02:c4:1b:
b8:cb:2a:a5:46:d5:6e:94:0d:d0:82:a9:76:f6:93:
c1:a8:62:86:15:b7:d4:58:ac:5a:10:f2:51:e8:ba:
32:99:cc:ae:6e:a8:a2:1b:76:33:f4:8d:4a:08:9a:
f6:cd:dd:19:07:72:0c:7b:ba:f1:ad:82:c2:6f:1e:
1f:2b:84:98:a2:43:44:a8:a5:64:a9:13:b4:55:a4:
f4:68:6e:aa:7c:22:7d:c5:c8:9f:46:37:ab:fd:22:
a0:9b:60:94:e9:cb:96:0d:99:de:1c:31:12:8d:d4:
35:45:28:2d:69:2d:39:f3:b6:c2:b0:4c:83:ee:17:
54:7e:c7:4c:33:46:4d:dd:36:42:c2:4f:8c:94:96:
68:19:37:23:0b:47:b7:09:d0:c1:8f:51:e2:55:9a:
ff:d1:8d:63:1c:0f:06:de:c1:b0:ed:93:9c:8f:0f:
dc:85:00:6b:f8:0d:cb:55:2f:2a:52:6e:bb:3b:b3:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:3F:C4:EA:55:3E:B2:52:64:D4:AD:F4:10:25:33:91:72:A5:03
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:26:29:01:f9:78:8a:f1:33:fd:b1:6d:6b:51:ee:63:1b:
07:f5:60:92:b2:ad:f5:99:53:42:8f:19:e2:b0:71:68:d2:6e:
4b:f8:26:bf:48:6d:00:42:7e:6d:00:04:f5:e1:04:0d:f7:aa:
f1:a6:8a:16:16:e3:4c:2a:c0:ee:01:99:57:77:c7:f0:c7:d8:
86:49:30:e9:ba:40:cc:4a:92:60:ea:6f:cb:aa:c9:98:82:c2:
50:30:d0:a2:76:16:1c:6d:90:16:86:31:65:40:dc:e5:ce:87:
9d:7a:15:0e:89:ee:9a:49:f9:5a:48:8c:d5:00:5d:61:2a:6d:
ef:65:a0:90:b4:3a:ec:74:95:a3:f9:fd:67:e2:e1:8c:af:67:
6e:1d:3b:c0:4a:d3:a8:7f:5f:d7:1b:d1:31:a0:ef:02:b9:fe:
e2:04:b1:7c:50:e3:84:58:ab:3a:2e:63:63:f5:88:48:d3:15:
e5:4b:4c:4b:fb:4e:d9:4b:ca:d9:8d:e3:f3:b9:8c:69:42:3c:
53:90:0b:83:02:36:f3:ed:fb:60:7c:f2:62:eb:74:e1:ce:eb:
54:4a:a6:e9:de:5e:c1:7b:0c:da:cd:a2:cc:0c:71:30:d0:ae:
01:ec:1c:18:db:f4:ce:8e:09:07:a6:ce:a1:29:00:5c:92:d1:
0f:e9:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:54 2025 by rpki-client