Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: E4HabA7f7HzVUFu2Lqd1mrszSHrzIVw6Dfv+uSzCE9E=
Subject key identifier: CD:7C:BC:4B:99:F6:77:91:29:1E:8A:D8:B4:8B:EA:67:13:BF:E5:69
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0197470C56CFA4AD2018854C28231064DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 03D6
Signing time: Fri 06 Jun 2025 21:01:20 +0000
Manifest this update: Fri 06 Jun 2025 21:01:20 +0000
Manifest next update: Sat 07 Jun 2025 21:01:20 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: +315Te4paj8HuvnfYeNWBlGayou5AfqZ31asvkjzJ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:56:cf:a4:ad:20:18:85:4c:28:23:10:64:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jun 6 21:01:20 2025 GMT
Not After : Jun 7 21:01:20 2025 GMT
Subject: CN=cd7cbc4b99f67791291e8ad8b48bea6713bfe569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:7f:d8:7e:c8:e5:62:83:5e:a5:ab:1c:0f:
de:85:fd:44:f1:e7:ee:34:1b:f6:9b:c7:01:bf:60:
eb:61:f3:9e:3f:db:83:c6:66:38:8f:c0:38:21:ef:
7c:7c:39:35:6b:fe:00:4a:1d:8c:23:39:c3:65:7a:
8a:8d:ec:cf:eb:ee:03:bf:0c:ab:63:a7:7e:16:77:
76:0c:bc:63:55:59:3a:0b:56:e1:7b:d0:79:2c:58:
eb:88:f3:e7:27:97:f2:0a:d4:0f:f2:0f:c7:83:6e:
a7:a5:f9:d1:aa:18:f3:ac:9c:61:ca:0f:a0:d3:df:
be:d4:10:e0:28:23:10:c5:69:52:1c:1c:c7:33:9b:
f4:11:39:0b:cf:80:03:6b:08:81:fc:eb:9e:24:1c:
9d:66:5c:78:41:05:23:f4:83:29:29:1e:18:3b:0a:
8a:59:09:39:b2:b5:37:1b:03:b0:71:08:37:f3:6e:
08:5e:aa:e6:dd:9f:eb:10:39:a2:7a:ff:ed:4a:ec:
0e:a0:0b:7d:ca:cd:b2:6c:a9:c6:98:75:bf:d4:64:
06:2e:a9:52:53:07:b0:d4:16:77:0c:63:33:9a:10:
5e:9a:5f:37:4f:fb:93:26:bf:f4:1f:a1:25:33:7b:
e1:b5:52:fe:13:1e:bc:19:38:9f:6c:c6:41:8e:ec:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:BC:4B:99:F6:77:91:29:1E:8A:D8:B4:8B:EA:67:13:BF:E5:69
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:03:3f:7d:fa:c2:8c:2c:49:2a:b2:d1:ec:f0:ee:0d:63:f8:
49:4e:84:bd:15:95:f3:ee:b1:17:ce:f3:a5:8b:12:bc:72:83:
d5:7c:c5:df:16:7f:48:9b:e5:c4:98:2c:bb:13:5b:dc:61:d0:
f3:46:29:93:c3:7b:21:67:ac:3e:0b:b6:ba:5d:d2:34:78:1e:
8c:7c:f4:82:28:a7:bf:8a:62:16:d3:b5:12:27:72:74:52:02:
ad:ba:b5:1c:bb:e6:89:29:06:5a:3c:0f:e8:4d:bb:fe:e6:f9:
f7:34:96:f9:60:2a:07:df:8b:99:b0:c5:3f:e5:b2:c0:a6:86:
cb:7c:f7:3f:50:5c:22:16:d9:2c:ee:9d:99:4b:61:25:3c:64:
df:ba:aa:c5:2f:0f:fd:7b:ba:b1:b5:cb:c7:52:43:5f:88:3a:
8f:08:b7:91:1c:6e:a0:e9:88:21:ec:66:be:7f:7f:64:82:e0:
f5:8c:2c:98:3b:41:cd:b2:4c:37:e9:0b:08:93:80:43:18:00:
7e:df:9a:46:74:54:6f:8b:27:a6:18:5d:52:b0:21:97:4d:99:
46:f9:b3:25:b1:51:aa:43:2a:79:66:10:63:e1:51:4a:58:3f:
b5:54:f7:0e:e5:06:df:58:93:d4:e7:a4:34:77:11:ee:af:df:
aa:7f:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:32 2025 by rpki-client