Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: Z0swJswOQiMBCjOiMXGm1x0FH1FcIX5IpdBG1cwMw6I=
Subject key identifier: 22:29:43:3B:B7:8A:4E:01:EE:C1:AC:93:77:7C:B1:9E:14:31:66:E6
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019746D4CAF7A7232035AE58E9B29D732B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0B80
Signing time: Fri 06 Jun 2025 20:00:40 +0000
Manifest this update: Fri 06 Jun 2025 20:00:40 +0000
Manifest next update: Sat 07 Jun 2025 20:00:40 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: LcYgcf5fyFBN7KSGZh+dt5pwq7rUbE9ccfaT2SMlS+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ca:f7:a7:23:20:35:ae:58:e9:b2:9d:73:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Jun 6 20:00:40 2025 GMT
Not After : Jun 7 20:00:40 2025 GMT
Subject: CN=2229433bb78a4e01eec1ac93777cb19e143166e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:52:5c:8b:8b:92:bb:0e:33:0e:11:fb:f6:
a6:bb:94:7d:67:6d:45:ac:7a:7e:fc:42:a7:1f:86:
07:38:34:e2:35:dd:37:37:bc:ca:0a:4c:59:6b:56:
02:9c:c7:76:ae:37:90:9b:df:80:2e:16:9d:90:0f:
21:6d:dc:21:3e:b1:10:92:de:49:e6:a5:93:71:32:
e6:09:23:1e:85:e9:21:6e:f0:7c:ca:d8:a9:93:e9:
21:68:50:be:d9:47:86:f3:55:62:bb:d6:01:76:c5:
c9:9e:43:1d:94:1d:4c:73:b7:07:c9:2e:27:22:f3:
25:ad:ca:3a:15:e3:7b:e9:36:bc:e3:5b:e9:1b:a1:
c2:05:7c:e7:8a:e7:6c:13:76:02:eb:c4:54:f3:29:
8c:5b:39:fb:72:c1:d1:ee:02:2a:f4:1c:40:2d:5d:
fc:3c:26:68:5b:ad:da:1f:89:d3:ef:3b:63:42:19:
1a:22:05:0a:39:bd:7d:24:2b:a0:7c:15:de:9d:e9:
39:2d:ab:b0:aa:5d:54:7b:71:78:5f:e5:24:0f:0a:
6a:58:13:07:e3:46:0b:79:8d:65:ca:5c:70:63:b6:
7d:9f:15:69:a8:39:fd:ac:cd:11:80:f4:8d:38:bb:
a0:06:4c:35:ad:e9:c0:b4:e5:85:97:5b:fd:42:ab:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:43:3B:B7:8A:4E:01:EE:C1:AC:93:77:7C:B1:9E:14:31:66:E6
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4d:b7:07:35:3d:36:53:e7:b0:59:6f:04:0d:95:01:bf:5e:
e1:51:8d:22:ae:6e:48:7a:90:27:ba:6c:57:36:c3:2e:ad:ec:
5b:82:84:4a:94:84:0c:92:49:17:ab:7f:95:3b:cf:72:28:71:
36:ac:86:16:a2:07:76:45:7d:70:c5:1e:28:0b:d2:d6:e4:e0:
bc:8d:09:69:b0:f7:39:ee:ad:ee:3a:2f:9c:27:0a:82:6d:a2:
bc:a1:54:45:f2:45:6a:9f:44:63:09:af:dc:11:dd:d4:28:bc:
7c:61:75:3a:cb:57:65:ef:20:70:dc:46:10:37:e7:fa:83:c5:
fc:e4:9f:c7:94:eb:7a:ab:17:11:30:e1:5c:f3:81:e2:38:19:
80:0d:76:ac:d0:ef:b0:40:00:44:81:95:fe:6c:13:ed:19:f9:
df:98:12:9d:ee:3e:7c:e0:bd:9c:c6:bf:fb:eb:0f:25:40:1d:
6d:c3:dd:07:69:cd:0e:76:dd:01:42:64:f1:48:e6:c5:59:45:
ab:fd:7c:df:ba:88:f3:f9:ba:ff:65:0c:ed:f9:ca:ad:06:74:
cc:80:01:1c:1a:29:ce:22:de:d3:75:80:0b:42:0f:a7:a6:f9:
0b:ba:a4:29:d3:b9:ad:7c:03:6c:01:d7:fd:d4:2a:33:28:f9:
d6:e4:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:53 2025 by rpki-client