Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: Yy1YwYlMzRlW+wUU+pMAJWzCJe6mroaUbRHviAxSf5k=
Subject key identifier: CE:D4:A2:F2:2B:8F:99:EE:38:C0:98:A9:B9:6C:93:14:42:27:D8:7C
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 01974C69622BA4F8C84B2FB569EA9AB38805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0D09
Signing time: Sat 07 Jun 2025 22:01:04 +0000
Manifest this update: Sat 07 Jun 2025 22:01:04 +0000
Manifest next update: Sun 08 Jun 2025 22:01:04 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: QSZEpsKABqQmf1ruZ1+RcijFwP3cCEL77cdeXbjlRuA=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:62:2b:a4:f8:c8:4b:2f:b5:69:ea:9a:b3:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jun 7 22:01:04 2025 GMT
Not After : Jun 8 22:01:04 2025 GMT
Subject: CN=ced4a2f22b8f99ee38c098a9b96c93144227d87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:95:a7:3a:d6:ef:1a:c7:28:47:42:10:03:
a0:e9:9e:f6:04:b7:ca:6e:7a:9b:75:04:98:78:30:
22:8c:a7:d7:52:0c:a2:6b:ad:d3:e9:52:0e:0a:0e:
92:fc:f7:73:ce:09:79:66:7e:46:bc:0d:82:52:f3:
4a:ea:6e:5c:69:8b:3e:15:2b:3f:e7:0a:26:8f:3e:
04:84:f2:46:04:c0:26:89:cf:c8:f9:ae:3f:7a:2d:
9e:42:2a:4a:66:32:7d:28:45:a1:b9:f9:57:8a:6b:
07:7c:f2:da:62:1c:71:30:09:46:54:36:26:1f:b8:
34:5a:e1:2d:2c:7d:c7:07:94:a0:8b:64:43:b1:ab:
dd:e6:31:fd:c3:69:dc:24:6b:d5:ef:4f:b3:30:4f:
5b:92:a6:5d:98:a5:ea:15:8c:2e:56:6b:b7:d3:61:
00:7f:77:c7:b1:4d:62:1b:ba:b6:f8:51:9e:62:4b:
f4:a9:58:da:81:2a:6e:18:f8:86:4d:cc:5d:5a:59:
42:42:19:26:25:ad:d5:39:f7:86:cc:14:64:98:b5:
03:ab:5f:ec:bb:f6:9a:ff:b7:6b:c8:c6:c3:e7:bf:
80:ea:03:48:16:e9:6e:6f:4a:0f:b7:54:d0:3e:11:
56:b6:c6:97:58:27:18:dc:05:42:e1:3e:1f:bd:a1:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:A2:F2:2B:8F:99:EE:38:C0:98:A9:B9:6C:93:14:42:27:D8:7C
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1f:89:e5:b5:6a:1c:4c:e1:bc:66:f3:e3:7a:e3:ba:5f:89:
f0:53:80:20:26:eb:44:71:f2:0a:de:48:4c:39:89:c7:5b:40:
42:f3:02:82:b2:50:47:87:8a:d3:91:80:d2:7c:7f:20:b6:15:
5e:b4:f7:57:c8:a1:c5:78:62:1d:34:f9:5d:5d:a5:a0:55:85:
5b:75:6d:47:8b:74:39:d4:29:c5:d0:f3:a6:e6:ba:e0:91:06:
00:00:b2:38:6f:7d:bf:e8:2c:8c:f9:41:8f:6d:b4:09:c4:0f:
74:60:12:a0:38:ba:dc:37:3f:30:ca:45:59:19:77:85:ca:0f:
57:47:47:88:96:90:e7:ef:bc:6d:f2:c6:19:26:27:11:5d:13:
5a:4f:1e:a4:58:19:9f:e5:71:8a:cd:85:9d:5c:ab:3a:7d:31:
37:9e:b3:c6:8a:f4:8e:21:0f:68:cd:0f:14:42:97:ed:0e:1e:
16:13:8c:24:84:2b:64:be:9e:1a:b5:10:68:7b:9f:59:0d:3d:
06:cf:3f:3f:bf:f8:35:4d:f3:81:60:42:0b:d6:27:ff:4e:e2:
23:5c:97:51:71:58:77:53:a1:8b:bb:6e:ab:42:91:9f:b9:dd:
75:02:dd:84:44:fc:8a:00:d0:db:30:dd:66:8a:f8:6c:ee:bb:
b2:f3:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:44 2025 by rpki-client