Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: nHST0+kOgyRKTW/2ioekXNc4Hxa+uAsw9V2ol5mxAkk=
Subject key identifier: 5A:EB:52:A0:45:88:BB:80:7C:24:44:E8:92:E4:F5:6F:7D:64:C9:20
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 0197605DB56292504A2517EAF1D930A80643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 0364
Signing time: Wed 11 Jun 2025 19:00:43 +0000
Manifest this update: Wed 11 Jun 2025 19:00:43 +0000
Manifest next update: Thu 12 Jun 2025 19:00:43 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: aLqABbMuZ0i/Yhjtq0Jh6MdBZ5dRujeaKOUjL3K5K0E=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:b5:62:92:50:4a:25:17:ea:f1:d9:30:a8:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jun 11 19:00:43 2025 GMT
Not After : Jun 12 19:00:43 2025 GMT
Subject: CN=5aeb52a04588bb807c2444e892e4f56f7d64c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:bd:09:e2:c5:90:00:53:55:08:dc:bf:b2:
28:59:73:4b:48:c2:7b:f6:f2:77:89:f4:29:11:af:
b4:c4:d2:ab:ea:11:5b:a8:42:32:e4:06:c6:14:c0:
23:6b:6f:d5:af:a3:20:85:88:a8:45:9f:0f:ee:ef:
09:97:48:a0:63:a0:66:86:18:c9:9a:15:a1:5f:a4:
73:f4:48:04:b3:b3:91:ae:32:f2:10:4e:08:21:4a:
62:cc:89:d8:27:85:58:79:06:21:2e:d6:d3:52:ab:
b4:de:d6:8b:08:7f:2b:67:ff:31:da:2c:c4:a9:41:
b3:df:a9:d0:e9:87:68:e8:41:cd:e1:55:dc:1b:bb:
d9:c1:08:50:3b:04:c0:73:87:a7:a9:26:ff:d6:67:
f4:63:f9:e6:83:12:fe:29:95:ac:27:5c:04:32:6d:
a0:21:66:b5:5f:c9:7a:49:a4:07:59:bc:c1:4b:44:
9a:e2:cc:f9:14:d0:b2:70:ab:bf:c1:76:b2:04:f0:
54:c4:2a:5f:90:df:b1:27:15:13:c6:03:a3:b1:c8:
45:db:58:e6:d9:f1:8b:74:68:43:5b:65:ee:63:95:
e4:62:d3:29:de:f9:9f:75:6a:98:44:c9:e7:49:dd:
f8:71:e4:a3:0f:28:2e:7e:d3:31:80:45:b3:84:f6:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:52:A0:45:88:BB:80:7C:24:44:E8:92:E4:F5:6F:7D:64:C9:20
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:87:bf:4b:d2:7c:5a:d5:7b:1d:88:8e:0a:60:30:7c:55:
b5:67:0d:d8:c3:4b:8e:4c:80:ab:3e:1c:9f:c7:e7:b5:c7:9e:
59:90:dc:43:7f:83:89:15:86:98:7b:be:89:fe:e6:4b:18:37:
11:44:3d:71:4b:5c:4f:84:2f:5d:36:94:9c:90:7d:5f:39:59:
d8:6c:a8:c9:7a:17:30:f3:4b:ac:75:4f:c0:2b:d2:9a:57:d1:
54:87:d4:4f:e5:3e:08:86:6f:52:a0:b1:b4:d5:00:c8:1e:7b:
36:3f:13:cc:0d:a6:03:cd:81:bd:30:39:2f:a9:39:68:1a:ad:
b5:49:04:67:8b:f4:a8:b4:e2:03:4b:f1:f9:db:8f:31:79:4f:
fd:60:db:4b:42:84:10:b9:f4:94:33:5f:31:e1:34:ac:a5:07:
dc:39:80:8c:65:12:a8:6b:f5:57:dd:c0:e8:fb:aa:a7:74:37:
44:31:dd:fc:20:bd:6c:c3:17:ae:72:2d:41:44:b9:6b:1f:f0:
76:61:31:f3:59:55:89:3e:41:df:5d:47:c7:d2:c9:6d:12:e0:
81:bc:a6:e0:d7:7b:12:76:ce:0c:fa:2c:2e:75:b3:72:48:7e:
0a:55:56:80:f0:32:91:54:06:73:5e:b7:07:13:7f:d5:f2:62:
e7:3a:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:53:14 2025 by rpki-client