Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: S0p5fRBoY9JS/ff+0aqYPPaoE1Y39umC4H4OXNGNayI=
Subject key identifier: 96:9D:B8:D5:3F:62:9A:DF:BF:16:AA:F5:A8:01:FE:CF:6C:9A:9D:60
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01976FD1138C30798EE680FA6031EFE61C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 036C
Signing time: Sat 14 Jun 2025 19:01:02 +0000
Manifest this update: Sat 14 Jun 2025 19:01:02 +0000
Manifest next update: Sun 15 Jun 2025 19:01:02 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 9NZWY4fn7mER+Sm7OC1S91MkufSpJ8NTaIjKQ+DlIoE=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:13:8c:30:79:8e:e6:80:fa:60:31:ef:e6:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jun 14 19:01:02 2025 GMT
Not After : Jun 15 19:01:02 2025 GMT
Subject: CN=969db8d53f629adfbf16aaf5a801fecf6c9a9d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:14:4c:1f:21:93:d5:68:d4:26:a2:41:01:
db:ae:49:6c:3b:e9:5e:78:76:eb:d4:91:07:2c:a7:
9d:62:ee:2d:c5:dd:e6:8a:62:19:b8:69:31:59:c7:
9b:20:80:84:fe:9c:4e:d9:ca:97:80:2c:40:f5:fa:
17:0a:c0:2d:6d:70:ff:2f:86:69:8e:0c:af:30:09:
82:ff:cf:38:4b:e9:ac:43:1b:dc:86:01:4f:98:78:
ca:33:1a:97:43:0e:90:11:d0:49:6d:46:df:9b:35:
69:09:de:b0:33:58:cc:cd:19:42:d2:d3:18:6a:73:
20:27:60:25:d4:dd:af:1d:68:c6:8a:54:ee:ac:3f:
fa:de:70:31:6b:b2:52:2a:6c:ed:28:9e:6b:cb:fe:
08:71:f8:29:eb:cd:d3:d4:f6:57:fa:29:e7:c9:dc:
d7:b1:fb:7d:cd:8e:3a:68:1b:33:b8:c7:4e:4c:44:
10:66:6d:8a:54:ed:b6:bb:7b:9b:42:40:26:fc:9d:
40:32:7a:7f:09:bc:27:67:e2:08:45:90:93:ac:2c:
c4:d2:84:e8:7b:fa:f4:15:9c:d7:00:4a:35:8f:b2:
3d:d1:16:51:0d:09:97:1a:78:93:fe:c5:27:59:6a:
08:dc:2f:ec:d5:c3:fe:1c:8d:29:cc:d5:8c:6b:e9:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:B8:D5:3F:62:9A:DF:BF:16:AA:F5:A8:01:FE:CF:6C:9A:9D:60
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:4f:e0:ff:88:1d:0d:39:89:0e:73:07:c7:9d:96:6f:df:
77:12:e4:f6:5d:d1:74:36:2c:71:04:40:7b:c1:d7:07:42:ad:
35:5f:34:62:b0:fa:ed:53:69:26:73:06:dc:bd:42:94:98:d7:
5d:b7:f3:d7:17:ae:0d:ec:40:3c:a3:3c:86:e0:87:7e:30:06:
d4:dc:5e:79:89:d0:a5:a6:89:8c:5c:bf:60:30:6e:1a:f2:23:
3b:6a:33:99:64:f7:63:88:ea:45:3a:fb:94:56:fa:9d:78:b9:
b2:3e:63:65:35:93:35:f8:5f:0f:2f:00:57:33:58:7c:fb:aa:
cb:92:61:56:fb:e7:19:98:c9:ce:31:c5:53:6e:98:ea:22:75:
ea:cc:a5:ee:65:78:f8:12:93:22:1c:44:a4:0a:48:44:d2:e0:
a7:08:8b:4f:d4:5e:ae:7b:1e:c9:20:d1:59:0a:fa:8a:1d:0c:
97:45:d8:04:2a:3d:01:86:3f:d4:dd:15:1b:f1:3d:ba:fe:99:
48:22:c7:0c:2b:3c:c4:6a:75:53:b6:c8:e7:81:b9:3c:58:ea:
e1:48:a3:8d:42:92:50:7f:d1:24:99:b7:eb:b6:08:52:17:83:
7d:fe:58:f9:bf:72:73:4d:ad:b8:1f:6e:c7:7c:64:e0:36:42:
cf:ad:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:05 2025 by rpki-client