Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File: kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier: GZKSL9p/1V1hn9hqdvmbadJuhBAPKUCGCC7P3NjlyNo=
Subject key identifier: 9E:A3:A2:EC:90:4A:1D:6E:5D:87:77:C6:15:E3:05:63:12:50:2D:D6
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 01974F6A20FEEF5EB227EF028BAAD9B72D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number: 04DC
Signing time: Sun 08 Jun 2025 12:00:44 +0000
Manifest this update: Sun 08 Jun 2025 12:00:44 +0000
Manifest next update: Mon 09 Jun 2025 12:00:44 +0000
Files and hashes: 1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: KCrkdTEnkiPavJ9cqOf0xwE7VvvzSVJIEYZsbWkgXyg=)
3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:20:fe:ef:5e:b2:27:ef:02:8b:aa:d9:b7:2d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Jun 8 12:00:44 2025 GMT
Not After : Jun 9 12:00:44 2025 GMT
Subject: CN=9ea3a2ec904a1d6e5d8777c615e3056312502dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:f9:e4:e0:51:18:45:8b:79:d2:b2:68:cb:
04:94:e7:f9:42:49:76:b4:0a:e3:af:28:44:34:47:
01:77:02:14:ca:53:60:de:b4:98:1d:95:fd:02:e8:
f6:69:a2:16:98:52:60:2d:9e:c0:e3:dc:0b:51:c2:
4a:95:d9:c3:5e:2b:bf:45:44:f0:0f:c7:4b:1d:50:
79:e0:79:a0:52:bc:4d:41:d9:cc:cb:ff:1d:6d:d5:
bc:e9:04:a9:7c:09:79:a3:65:6f:ae:d5:f6:c5:a3:
c5:bc:27:29:3a:a6:89:b3:a8:ae:3c:ed:6b:74:1e:
d2:e6:37:41:89:f6:3e:07:ca:48:15:73:c3:cd:9a:
6e:ec:79:a3:03:36:43:73:9f:2a:f1:31:16:83:75:
c2:66:ce:6d:57:11:bc:dc:77:27:69:26:8d:68:48:
4f:a1:66:8a:55:a2:1f:b6:a9:f0:1c:9c:58:16:29:
5c:1e:4e:2f:92:8e:5e:08:0e:36:20:5e:13:83:a5:
2e:69:bb:8e:35:7c:f1:d9:5e:b1:66:b4:47:7e:67:
e8:30:32:54:c9:b0:0c:d8:c5:05:c0:db:4c:76:82:
b8:9c:7d:04:69:04:7e:50:69:45:30:16:dc:2d:cc:
a3:8e:f9:67:d5:2d:cf:1a:fc:11:a7:83:2b:41:34:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:A2:EC:90:4A:1D:6E:5D:87:77:C6:15:E3:05:63:12:50:2D:D6
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:0b:86:6e:6b:59:13:cb:fc:a4:da:76:c3:08:be:44:ba:
4e:ca:57:cd:5d:2a:d4:52:41:da:41:a5:b2:3e:cd:2a:7e:e2:
d6:83:92:d1:cc:29:ed:79:a7:33:83:6b:ff:47:50:3a:c1:0e:
d8:3d:b3:3c:5f:82:81:bf:2e:44:db:7b:8f:50:a8:cb:e3:24:
82:e3:c1:18:61:d6:40:2a:c9:92:57:d6:51:2d:54:bd:14:79:
43:10:9f:45:f5:20:fb:3c:c8:85:52:e5:ce:72:ac:1d:5f:6d:
a7:cd:06:23:17:87:05:fb:17:48:e5:ab:7c:07:d4:01:d6:f1:
ec:b3:fd:2e:18:49:99:2a:1a:e2:db:7c:eb:dd:ba:43:85:dc:
4a:dd:65:c3:e1:71:6b:e2:8e:41:b6:0a:e5:d2:ad:7c:a6:e5:
a0:61:75:c1:3e:86:db:15:00:df:a6:3d:11:f9:44:a3:6e:d4:
ee:15:96:9d:9e:96:42:ae:71:e9:0b:e8:b3:4e:10:6c:4a:4e:
66:c7:33:7b:37:fe:d3:9b:b2:0d:89:08:ca:ca:1d:d3:4e:67:
25:6c:05:6c:7a:7c:67:71:bf:69:7c:08:44:cd:d1:01:98:2c:
35:a9:84:44:7a:0a:1b:5d:ce:f3:c1:06:a7:08:d1:73:21:24:
5a:bb:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:05:57 2025 by rpki-client