Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: zMQQOo4utPMXiGMdSJdubmbEQoxQ0IIQAEw+tIx3eW0=
Subject key identifier: 71:18:A0:D4:01:6E:F0:79:1C:21:AA:3B:28:96:F1:D2:B1:8F:C6:81
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01974C9FFAB32A4617F369A4B190E28FA8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 23:00:42 +0000
Manifest this update: Sat 07 Jun 2025 23:00:42 +0000
Manifest next update: Sun 08 Jun 2025 23:00:42 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: SnDKVg/T3lp6jc7b0A6vl8ZAOxiv9dRoWg+69hxV0RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:fa:b3:2a:46:17:f3:69:a4:b1:90:e2:8f:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jun 7 23:00:42 2025 GMT
Not After : Jun 8 23:00:42 2025 GMT
Subject: CN=7118a0d4016ef0791c21aa3b2896f1d2b18fc681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:fb:3e:5e:aa:0c:50:52:ac:a4:58:37:bd:
b1:fa:68:86:0c:07:c1:72:ce:3d:34:2d:73:46:42:
2f:61:4b:15:bd:57:5f:2d:73:72:39:e9:c5:67:22:
34:89:e7:91:21:44:1c:10:02:c1:dd:52:57:75:c7:
c6:35:b8:2c:33:de:ef:09:6e:26:33:e1:7b:65:9d:
f8:09:70:80:4a:50:b9:bc:16:57:cf:bb:1f:15:e8:
3f:a4:c1:ff:38:7f:fe:39:e3:0e:a8:58:4d:b9:21:
80:23:8a:e0:0d:5b:1e:6b:25:34:3d:e9:36:97:ae:
45:c5:ea:ca:f6:20:8d:83:c8:f1:df:98:d9:09:8c:
2d:8c:4b:d8:5d:81:d0:a1:32:83:5f:a7:e3:8e:a1:
c5:94:f8:a6:4e:b7:e6:b5:8c:df:37:43:ab:87:74:
aa:fb:89:57:5e:94:78:c8:2d:b3:1b:c6:34:5a:03:
eb:b6:a8:1e:fe:68:58:47:29:8c:54:06:51:8f:d0:
6e:2d:07:96:e7:9f:dd:4a:08:f7:02:db:b4:fd:7a:
ff:81:62:d9:16:db:32:1f:49:d1:f9:3e:76:45:71:
2c:32:8c:00:04:4f:4b:cc:c0:a5:61:25:14:32:40:
6b:a5:7e:0e:b3:99:a5:83:3e:86:e9:f5:f3:85:fa:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:18:A0:D4:01:6E:F0:79:1C:21:AA:3B:28:96:F1:D2:B1:8F:C6:81
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e0:c1:5e:53:b0:fc:5e:ca:3c:a1:5e:e5:a2:ca:4d:d8:2e:
e6:85:ec:4c:87:f1:a0:67:63:0f:37:20:ec:b7:be:6d:9e:b3:
dd:10:41:08:57:3c:be:f8:e2:68:89:3b:9d:c8:af:9d:7f:5d:
d8:06:db:49:87:9e:0a:ea:cd:27:b8:58:f7:e7:fc:2c:03:ae:
d3:a2:9e:55:2b:9a:4b:62:9b:8a:51:cc:4b:37:07:b3:a4:31:
f0:16:63:83:29:74:8a:16:ef:82:9a:3d:9f:9b:71:66:d1:13:
df:cd:4e:8f:fe:15:0c:5a:20:fe:b2:c0:1e:22:d5:ad:df:ce:
46:3d:5b:db:c8:89:01:37:96:db:04:a7:c7:66:ef:5e:9a:8a:
29:97:49:62:27:14:fc:71:f2:b5:88:8c:d5:13:cf:5e:a4:5e:
2a:58:57:db:05:1d:e1:94:d9:ed:5c:65:f3:2a:45:32:f5:da:
f1:c1:8c:ca:75:27:0b:c7:10:e2:eb:23:80:23:ac:d4:1c:c3:
d0:cb:44:8c:c9:ff:31:3c:b1:dd:f5:06:b3:1b:51:86:8e:94:
d7:ba:d9:45:46:b4:a9:7e:fb:a6:a2:31:dc:c2:fe:8d:a0:a0:
d3:14:8c:10:72:1b:43:98:cd:bf:08:16:bd:5d:2a:d8:e9:c3:
7a:64:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:26 2025 by rpki-client