Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: 3h3LJPHYXGgYvu29S8/1Sv4HUDSMb7NSEXs223UmAv8=
Subject key identifier: 99:76:25:12:2C:F9:F9:5F:5C:7C:A9:25:86:B3:D0:A4:06:25:1E:BA
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 01975490F2E4C4729E0B4517FF5B1F154DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1130
Signing time: Mon 09 Jun 2025 12:01:14 +0000
Manifest this update: Mon 09 Jun 2025 12:01:14 +0000
Manifest next update: Tue 10 Jun 2025 12:01:14 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 4pU/VzvGrviYcS8T/HOO0S2wJ8e8ekhEK/5+/wIxknM=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:f2:e4:c4:72:9e:0b:45:17:ff:5b:1f:15:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Jun 9 12:01:14 2025 GMT
Not After : Jun 10 12:01:14 2025 GMT
Subject: CN=997625122cf9f95f5c7ca92586b3d0a406251eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:06:1d:56:09:9a:d6:e3:8a:9b:a3:68:82:
d2:57:f7:c3:e3:b1:a7:8b:75:01:d8:2b:e9:f6:f4:
fb:28:0f:61:80:38:8c:26:5a:c5:73:3e:60:85:11:
cc:a5:9f:dc:6a:9c:19:9c:27:78:79:55:a8:39:3d:
bd:41:f4:d6:6f:28:a2:1f:38:a3:66:a1:03:21:57:
8d:b7:30:b2:8e:c0:43:ea:c5:89:9d:48:13:84:a5:
a8:d2:6a:c2:4d:1d:b6:66:8c:4d:fa:89:b8:c2:83:
bb:3d:d8:0d:08:90:6f:18:10:4a:76:52:8f:20:b4:
87:97:28:2d:ce:76:6a:37:35:22:4e:2f:b4:b1:6a:
5f:3e:5f:45:08:0e:72:86:c5:9c:9c:ce:54:a1:8c:
d9:4f:04:e2:d4:dc:9f:82:5f:29:7e:a4:66:51:4d:
a1:ba:e0:e7:c0:be:ed:c9:ba:0b:48:08:6b:fb:92:
06:d4:3b:da:a8:32:ed:ba:a7:8f:13:7a:5c:8f:84:
cd:15:45:da:5d:11:ca:28:25:2f:ea:26:b8:38:dc:
74:bd:bd:59:aa:0b:a5:62:26:bc:23:70:f7:54:95:
f7:6e:1d:cf:24:a1:18:2a:5a:0c:69:b3:e5:6e:e4:
05:e6:e0:90:4f:19:4f:10:fc:30:fb:b2:62:9b:0a:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:25:12:2C:F9:F9:5F:5C:7C:A9:25:86:B3:D0:A4:06:25:1E:BA
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:1d:08:fd:88:40:16:35:b6:63:df:f2:58:c1:d5:48:5a:
80:6f:75:1c:07:a3:87:19:10:d0:e4:0f:ef:f4:55:6d:51:3c:
79:de:d1:8c:92:74:d5:93:f3:c5:53:d6:7b:38:c0:72:3e:f7:
93:1c:23:b7:87:45:ab:4b:b7:ec:0e:3d:f1:35:b6:2e:7f:a0:
17:cb:92:df:14:3b:d3:88:85:e2:a2:e6:1e:bb:e3:22:db:c7:
b3:d8:c8:9d:52:17:a7:2a:1a:42:fe:e7:f3:5f:5e:dc:0d:6f:
18:83:55:c1:10:60:2b:77:dc:08:09:0d:04:0b:08:d3:5d:b6:
5d:bc:93:43:a3:f3:64:6b:1f:7d:b6:46:82:bc:11:85:5a:76:
eb:a8:85:f5:26:ba:88:88:28:a6:9d:5f:25:46:1e:57:bd:96:
38:0d:49:9c:03:b9:e6:61:1a:3f:2f:eb:24:e3:0b:82:3d:b7:
5a:86:e6:4e:d5:64:46:1b:d4:9e:dc:41:32:7e:b6:5e:fb:db:
53:0a:4a:dd:c9:c2:fb:64:d3:b0:76:71:53:d3:c3:27:4f:08:
85:d5:63:b2:6b:51:f9:db:b6:84:7e:7b:06:46:d3:fc:c6:e4:
7a:bb:e8:6a:3a:4e:04:17:69:5a:22:75:19:cb:60:10:31:b7:
82:38:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:04:46 2025 by rpki-client