Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: jMT7uRaXQlz/eBtOsThT13IMITgioliw2W/FVXP4GIw=
Subject key identifier: 55:0D:FE:43:89:98:14:28:C0:5F:49:3B:8B:0E:C8:CC:78:DF:64:36
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019758A409520813F8215EB75BA03019AD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 0360
Signing time: Tue 10 Jun 2025 07:00:34 +0000
Manifest this update: Tue 10 Jun 2025 07:00:34 +0000
Manifest next update: Wed 11 Jun 2025 07:00:34 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 2f92TV5erXpsq+2czMud6Jygs4EKtFMltGwfDwTJeu8=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:09:52:08:13:f8:21:5e:b7:5b:a0:30:19:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jun 10 07:00:34 2025 GMT
Not After : Jun 11 07:00:34 2025 GMT
Subject: CN=550dfe4389981428c05f493b8b0ec8cc78df6436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:62:a2:92:c6:59:71:c7:16:5b:d7:70:67:
99:f7:5c:e3:7d:ea:6a:f6:bd:83:b3:2b:2c:58:10:
0f:86:b3:ba:d1:c1:61:10:9a:55:c7:b8:23:b3:22:
cb:ba:b1:fe:b6:7f:e6:d6:b2:8c:de:c3:a1:f8:bc:
8e:7e:c6:a8:d1:39:95:d4:e2:3d:62:fa:9f:6c:5a:
20:df:f7:ee:7f:fd:ea:aa:82:5e:f7:4c:20:4f:b0:
0f:1c:6a:b6:9b:be:38:25:32:9b:4f:65:7f:23:13:
d4:75:24:80:8d:05:3a:0d:a5:6d:ed:3b:c7:8c:1f:
76:f5:10:3e:21:ed:aa:75:db:e4:c1:ce:a5:31:05:
ed:a8:ac:75:83:25:90:0a:03:41:b5:9a:5f:e5:01:
e3:7f:d0:19:55:6c:b2:21:27:de:0d:b3:8d:14:2b:
61:af:82:d2:ee:fd:c8:58:f5:de:cd:f2:ac:fd:62:
13:77:1a:49:58:49:54:d8:ea:34:f3:8c:79:0e:8e:
2a:e4:b1:63:e0:3b:2a:b9:9d:de:92:1c:87:01:64:
90:4c:4a:ec:33:7f:ac:3d:b5:47:ea:0e:92:ba:63:
1e:e1:f5:0d:41:35:d7:37:ce:ae:a6:9b:10:9b:be:
e6:d4:b4:ef:e1:85:66:eb:4d:70:a0:00:57:12:66:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:FE:43:89:98:14:28:C0:5F:49:3B:8B:0E:C8:CC:78:DF:64:36
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:df:5d:b9:64:f8:4b:b9:45:23:21:7d:0a:67:53:61:1a:17:
f0:01:91:20:45:25:6d:4d:53:18:2e:1a:40:5a:a3:b1:8a:ee:
60:81:9f:13:6a:9d:95:b0:6c:ea:b2:40:f2:db:27:5d:a7:b5:
08:bf:66:1e:a3:7a:87:ca:db:f7:59:0f:3a:02:6f:00:d5:74:
97:47:87:4a:c4:e6:24:bf:03:c3:34:15:14:79:c3:d0:02:90:
77:b0:13:ee:cf:76:86:60:27:01:c1:d3:fd:f7:96:f1:85:a7:
95:b4:5e:93:4f:49:61:f6:63:73:b1:3f:59:68:ce:b6:ae:89:
8b:ac:b7:68:4d:c9:81:42:d0:4a:9a:35:8d:c8:d7:2f:b0:a2:
9a:3a:cc:6a:8b:20:97:30:32:86:75:48:b5:8c:4b:08:a0:ac:
cd:e8:cd:02:49:07:42:52:27:d8:dc:da:bb:f0:0d:47:ca:cd:
23:72:5e:2c:aa:69:0d:84:7a:09:c8:40:5c:49:73:73:9a:03:
59:4d:9b:c6:0f:34:5b:a3:60:ff:2e:13:41:23:f6:ef:0b:a7:
d6:4c:03:db:cd:61:0f:f5:da:ff:fb:28:a1:52:c3:00:ff:7b:
e4:0b:19:77:a4:81:d3:45:6a:63:38:45:35:50:3a:6e:cb:99:
16:4b:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:07:04 2025 by rpki-client