Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: PnZMImzwovufBcbz7Y6vlxrq6V1TciRtp9JNNcTuDHw=
Subject key identifier: E1:7A:82:5F:35:AB:DA:09:E5:DA:77:33:09:33:83:08:14:35:D5:B8
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 0197458BA4B3CB02E21D775DBF37F89D59C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 0587
Signing time: Fri 06 Jun 2025 14:01:08 +0000
Manifest this update: Fri 06 Jun 2025 14:01:08 +0000
Manifest next update: Sat 07 Jun 2025 14:01:08 +0000
Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: 5NklEqJhMEWVTdxT+Aqzdu306tlYcxlK6bKpme8peBw=)
2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:a4:b3:cb:02:e2:1d:77:5d:bf:37:f8:9d:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Jun 6 14:01:08 2025 GMT
Not After : Jun 7 14:01:08 2025 GMT
Subject: CN=e17a825f35abda09e5da7733093383081435d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:76:1b:5a:63:b4:32:79:da:ad:07:e0:fd:
ea:eb:be:f6:50:63:26:95:1e:95:ba:83:57:b4:fc:
b1:96:45:27:11:fe:86:da:1d:49:36:0f:1f:af:ce:
6d:98:fc:15:fd:4f:c6:d4:11:79:2f:e5:b2:f4:5c:
83:78:68:8b:51:c1:0c:03:54:15:91:21:0e:7f:80:
72:e0:55:38:b2:7d:24:74:45:76:6f:fc:e0:6d:6e:
ee:91:37:2e:9a:29:e3:14:ae:cc:d3:a4:8f:79:af:
03:e7:ce:7c:3d:75:c0:1e:ef:89:98:75:97:78:0a:
d5:97:f0:b6:bf:db:12:4c:d4:7b:47:a0:22:34:5b:
ff:1d:d2:07:50:df:f4:be:db:1b:a7:bd:f1:32:aa:
45:e3:e7:ae:6f:14:54:9b:b9:ee:37:3d:57:e8:86:
96:6a:1b:a8:8b:ff:69:b9:02:77:a5:ce:a4:cf:a4:
37:c9:64:b0:ab:33:db:fc:f5:f8:0d:96:a4:91:b3:
08:21:ab:11:d4:3c:c4:64:be:4d:8d:d6:06:b3:c2:
d2:f7:fc:58:f2:44:3a:4b:98:6f:6f:16:ce:16:86:
a5:a3:91:85:4e:5b:64:15:56:ae:e6:f7:f6:dd:ed:
d0:7b:fe:cc:3f:92:70:fa:d2:09:b4:06:10:35:aa:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:82:5F:35:AB:DA:09:E5:DA:77:33:09:33:83:08:14:35:D5:B8
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7a:40:69:f5:8a:5b:44:fe:d9:e7:c3:dc:3f:5c:b8:db:ce:
42:05:92:cc:e8:5a:b1:c4:03:e5:57:2e:84:94:cb:56:d4:a7:
8a:59:84:21:42:51:5a:55:e9:5e:b1:7e:e0:64:68:b7:9b:d2:
f6:81:e1:eb:14:c2:12:19:12:28:43:f6:f9:ac:5c:ce:6b:10:
c4:cd:ce:46:7c:ff:9b:2a:e5:ce:75:56:0e:e7:da:d3:a1:8a:
5e:75:17:60:f0:d0:ec:df:e5:06:7a:fa:68:8e:37:79:2a:2d:
de:d1:78:3f:c2:5b:c5:c5:ab:2b:04:12:84:23:a4:75:9f:0c:
8b:f1:d3:5e:8b:33:d4:35:17:fa:67:bf:eb:6a:35:7b:8f:2d:
76:3c:ef:0d:4c:f2:aa:b0:33:75:aa:e0:a7:ab:eb:05:87:5d:
74:cb:91:0f:9e:45:df:a3:40:7c:69:50:0a:a6:01:15:4b:df:
68:0b:53:1e:0e:66:64:be:b5:b0:ed:4b:f7:07:b9:81:7e:f0:
31:4a:d4:ba:ee:c1:97:ca:62:7d:cd:15:72:32:0f:2b:9a:66:
b3:fb:12:a8:5f:ec:e9:77:00:60:ac:f9:b1:5f:72:97:00:b2:
93:9e:08:7e:2b:31:f7:0e:8b:f8:22:69:cc:0b:8e:1e:ec:4b:
9d:d3:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:24 2025 by rpki-client