Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: Fd3tAuhPto2/OMcKGrHjlSjUdGyNXEI0BwXtPtljOK0=
Subject key identifier: 33:D3:22:71:C6:3A:37:B7:4A:B0:16:8B:2C:CB:6D:74:3E:50:87:49
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01974EFC4DDE41E39289AAD376FE2D03813D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 10:00:47 +0000
Manifest this update: Sun 08 Jun 2025 10:00:47 +0000
Manifest next update: Mon 09 Jun 2025 10:00:47 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: Ba5u1AqtKW1Yyqqe1QLDwWaSspXQa4plOdaRDQu+rt4=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:4d:de:41:e3:92:89:aa:d3:76:fe:2d:03:81:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jun 8 10:00:47 2025 GMT
Not After : Jun 9 10:00:47 2025 GMT
Subject: CN=33d32271c63a37b74ab0168b2ccb6d743e508749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:43:a1:b6:64:23:15:4e:2f:e5:d0:35:20:
13:f9:dd:6f:f7:87:27:0c:f7:6f:08:ec:0e:51:de:
a4:cc:e3:db:04:58:cf:51:01:3d:20:5e:9c:03:d2:
fc:b3:1b:ab:15:d6:06:31:ab:2f:8f:49:e7:7e:eb:
fd:ff:87:29:de:77:d5:6b:64:02:d5:e0:e8:78:e6:
74:df:b1:0b:77:4a:83:83:35:7a:d5:ba:1f:48:5d:
13:ab:15:cf:21:1a:15:5e:07:5c:18:3e:0d:1a:24:
ed:15:80:7a:2c:40:e6:66:d5:90:ca:05:7d:78:2f:
fb:48:18:42:84:0a:1f:7a:6d:61:77:ee:9b:7e:29:
cc:ef:5f:2b:b0:39:31:88:9e:8b:c8:97:ea:be:bd:
f8:15:57:cc:c3:a2:62:7a:fd:84:c6:81:3b:70:74:
be:20:96:92:db:f2:9d:57:fd:df:75:c6:f4:2e:96:
91:60:24:59:7a:f5:a0:45:c1:c4:2a:18:2e:51:13:
29:5a:85:ff:d5:1e:fb:36:b6:91:55:ad:b8:6f:d0:
26:65:d7:b4:b1:40:e9:f9:a7:bb:7c:34:7a:cf:bd:
51:26:f5:40:3f:d9:51:36:06:38:79:e7:86:82:e2:
82:22:19:50:c8:23:c3:34:db:8a:38:fa:6d:9a:e9:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:22:71:C6:3A:37:B7:4A:B0:16:8B:2C:CB:6D:74:3E:50:87:49
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2d:99:a5:bb:e4:83:af:3c:56:9f:b7:59:c6:73:f6:40:a3:
3c:3a:e8:0c:bd:ff:40:13:23:d7:bf:18:e5:dc:2a:c0:09:7d:
a3:74:67:92:a5:d4:01:3b:f4:c1:ba:5a:6f:05:d3:cc:1e:7c:
ca:cf:a5:53:87:b5:d5:e1:4b:0b:3e:91:69:10:9e:03:4d:45:
86:f2:e9:a8:5b:dc:81:ca:03:e1:82:52:c8:24:63:1a:df:6d:
18:96:b0:fc:11:44:58:07:1f:47:7f:76:34:28:30:c2:69:d0:
66:2c:15:fd:0e:3d:e0:6b:2a:85:7a:02:d6:22:d6:c9:aa:89:
c4:1b:a3:50:c3:23:1d:9f:5d:fd:5e:cf:8f:26:20:0d:6c:6f:
37:71:5d:a5:1c:9f:f5:3f:16:4c:e0:8b:3c:b8:f8:a1:99:eb:
ad:f8:8a:bd:9b:c4:a1:0f:73:39:6b:c3:e9:2f:11:8f:d7:57:
6f:27:34:0c:b2:76:0b:83:0b:e5:fe:37:7a:1d:a6:08:ad:9e:
77:c2:84:92:80:d4:b1:cc:f7:0b:97:50:21:65:4d:51:05:2b:
7d:c2:3c:85:36:05:e1:81:dd:36:aa:55:b6:e6:2f:ff:3b:45:
43:96:ae:eb:5b:9a:f4:96:40:e1:f2:3d:12:f0:cf:7a:b8:0d:
1c:41:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:34:02 2025 by rpki-client