Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: ndSU462Eb5J3xZWGT4hgjH7j4C/vmOQ08HUCbsjiwEA=
Subject key identifier: BC:DE:D4:3F:81:66:41:75:71:4B:7F:4B:1A:7C:D0:7A:1D:EE:B0:56
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 01974AE8F19BE63D8AD95AFEDFB2E9585E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 07C3
Signing time: Sat 07 Jun 2025 15:01:09 +0000
Manifest this update: Sat 07 Jun 2025 15:01:09 +0000
Manifest next update: Sun 08 Jun 2025 15:01:09 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: jEvuUTwfcwDVIQzj9c9BOBGYsBAAx1tKoO/XERlTggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f1:9b:e6:3d:8a:d9:5a:fe:df:b2:e9:58:5e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Jun 7 15:01:09 2025 GMT
Not After : Jun 8 15:01:09 2025 GMT
Subject: CN=bcded43f81664175714b7f4b1a7cd07a1deeb056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:a1:39:c2:69:7c:4c:c9:a7:e9:07:70:60:
30:f1:8c:2f:17:5e:d2:00:9f:3e:b6:75:4d:02:e1:
1f:ce:29:a7:28:65:a6:d3:6c:f1:57:c6:14:4b:a6:
05:54:3f:62:c2:13:59:19:7e:44:b4:c8:9c:9b:45:
2d:3d:1d:f4:26:e0:89:a9:c3:a1:ec:9d:f6:8b:fd:
3d:e4:70:56:81:7d:fe:47:8b:e4:4e:aa:d6:91:0e:
9e:32:47:8a:51:5f:f2:3d:10:31:b7:c6:6b:28:ea:
f5:56:3c:63:71:b6:24:90:ff:f2:d2:2a:1d:39:cc:
47:c5:77:37:90:94:e8:67:e6:94:ed:60:76:ef:41:
5b:77:cd:77:0e:0c:e5:80:3f:3b:02:7d:4f:ea:ac:
a3:04:1a:5b:67:c0:d7:1c:f2:f5:76:6a:70:8d:3a:
36:59:24:8a:e4:da:e9:5c:bc:f9:4b:f3:47:93:02:
eb:75:97:e1:7b:73:ed:82:a0:11:87:f7:2f:f4:97:
cc:e2:98:1f:34:77:a4:47:07:ee:98:75:ae:cf:ec:
6c:6b:09:4d:8e:82:ff:26:e1:a1:46:a5:16:dd:cc:
c8:00:02:ca:f8:02:94:a6:90:59:b5:18:55:39:a0:
a6:79:7a:25:37:75:3f:c3:1c:89:ea:12:f2:1a:14:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:D4:3F:81:66:41:75:71:4B:7F:4B:1A:7C:D0:7A:1D:EE:B0:56
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:2d:87:fa:ca:17:a8:c3:1c:a3:dc:10:62:db:b8:97:2e:
d2:5f:91:9f:d5:64:50:59:e7:c7:79:1b:fa:35:9c:2e:aa:d3:
38:e9:ac:c4:59:93:87:4e:58:0b:3e:55:86:bb:a4:0a:40:7d:
df:57:fa:5a:cf:ea:c7:62:43:81:3f:11:44:61:d8:91:cb:75:
79:2b:f8:36:6e:67:64:8d:a5:59:c8:37:78:9d:61:ab:0c:ed:
8c:30:8b:66:6d:a1:42:4f:98:bc:bb:1d:d7:a0:3f:7f:3e:74:
53:97:c1:de:67:80:f4:5f:f0:b8:4e:a4:8a:c7:d2:78:d8:72:
63:76:58:0e:37:a3:c5:37:ec:dc:1c:47:58:db:9b:be:1c:41:
4d:38:fd:bd:2b:7b:06:c8:c1:fa:34:25:cd:47:81:6d:3c:00:
3b:11:f7:0a:ba:65:6c:0b:5a:58:be:60:77:75:5d:8e:6f:3e:
fa:4b:5c:73:c7:8c:24:fe:5f:e1:d8:af:77:9c:80:73:3f:54:
b3:f6:a7:b7:8c:c3:f4:1c:1d:ab:bd:52:55:a6:85:12:19:b3:
4c:57:1f:42:e0:49:75:c7:d5:08:12:df:5a:32:ba:1c:76:26:
86:2a:58:05:3d:31:24:fb:b9:b5:9f:3c:7f:b8:6d:e5:0d:9a:
94:0e:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:45 2025 by rpki-client