Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: mVYD3PjyiliEw/u8bPHpsobt8Hz6lnHaaFGoPOIXkvI=
Subject key identifier: 09:15:90:D1:96:EA:7E:5A:E5:21:9B:15:15:C8:B5:BB:50:A4:A1:3F
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01974C9FD2C8873F921EC313FCF359E38104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 23:00:31 +0000
Manifest this update: Sat 07 Jun 2025 23:00:31 +0000
Manifest next update: Sun 08 Jun 2025 23:00:31 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: +Mv9veaU7bdjQ5dBId0ykcBXhYk8PjLZy0kRUiQXTAg=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d2:c8:87:3f:92:1e:c3:13:fc:f3:59:e3:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jun 7 23:00:31 2025 GMT
Not After : Jun 8 23:00:31 2025 GMT
Subject: CN=091590d196ea7e5ae5219b1515c8b5bb50a4a13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:da:bf:26:dd:c7:68:d4:83:cf:d9:78:f2:
e5:2c:df:4c:20:3e:bd:a1:cb:86:76:6d:e8:6f:59:
11:0c:44:d4:ed:d7:27:10:cf:37:b5:13:ae:a9:00:
28:28:cf:a5:14:96:76:49:ac:7b:7f:a7:5f:a1:9a:
0d:88:69:c4:8c:45:76:8d:3d:d1:18:53:7b:25:cb:
4a:8c:62:89:5b:ca:48:94:51:ac:d4:ea:28:4f:d4:
09:1d:ff:7f:ad:fd:3f:3b:ed:2d:17:9f:d7:35:4c:
cd:75:c6:92:4e:a2:1e:de:85:63:51:71:b7:57:7b:
20:0b:25:82:17:3a:fd:e5:3a:6d:f8:3e:41:60:86:
84:c6:d4:df:d3:90:12:3a:22:25:31:2a:18:1f:a5:
37:69:26:fc:aa:ea:39:84:ba:dd:3a:fc:d6:4a:e1:
54:8e:b1:ca:b0:69:60:de:7d:8c:a7:25:39:d4:e1:
29:22:b9:9c:0b:f3:f9:5d:8e:e1:c1:23:ce:8a:c7:
a1:26:ab:ac:66:58:fa:53:c2:82:2c:25:98:46:96:
5f:1b:d9:74:01:44:2d:bc:df:ae:d2:a9:78:b7:03:
d7:82:5e:33:30:8d:c4:61:0b:bc:38:ae:6d:33:1c:
5a:80:60:eb:fb:2f:db:42:cc:70:c7:e9:da:5a:64:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:90:D1:96:EA:7E:5A:E5:21:9B:15:15:C8:B5:BB:50:A4:A1:3F
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d7:54:b8:a6:94:ca:d3:12:70:fe:fd:6e:73:87:16:3e:b7:
ac:20:5f:5a:81:ce:ed:b8:8c:93:4f:35:5c:9a:c8:7d:91:2d:
57:f9:b8:39:0d:5d:fd:75:61:7d:b0:a6:73:22:89:a4:6d:8e:
f1:3c:c0:b0:23:23:60:47:a0:0d:e1:a3:cc:93:95:0e:37:c7:
5d:43:da:eb:6a:ac:3a:85:84:a0:a7:59:ee:77:80:62:bc:8e:
97:23:67:56:ff:76:51:77:a8:35:dd:1a:4a:07:e1:8e:58:db:
9c:30:d4:37:89:db:7d:7b:36:ce:4e:1e:1b:8d:20:94:7c:46:
2d:eb:e9:88:96:4d:d8:e3:9f:f3:c1:71:4e:28:7c:ee:19:35:
f1:86:cc:de:d8:67:ac:6e:e1:a6:a3:87:e4:2e:c7:cb:2b:ac:
54:51:61:b8:36:00:3c:47:4b:45:06:3c:f7:46:53:a9:53:30:
df:06:6d:7e:c8:7e:d5:96:13:9c:2b:ad:ba:d4:7b:d2:a0:ff:
94:07:5c:c7:fb:e1:d5:76:a1:50:0f:87:97:9e:95:25:1b:ad:
49:e3:fb:fa:32:bc:b1:61:27:35:63:c8:1c:56:48:d2:2e:c7:
61:81:21:bf:a3:e1:14:fa:20:ae:b0:c7:16:7e:03:15:b3:a2:
f3:45:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:38 2025 by rpki-client