Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: 8WJsdhuEY8M7+NLIECvB5wT21Cq/TbMIjOtO2YFzhVI=
Subject key identifier: 5A:E8:3D:85:D5:1F:63:FB:04:E2:D4:91:F7:44:B1:36:96:6F:34:BF
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 01975E382071154E7744551714DDF6252342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 09:00:25 +0000
Manifest this update: Wed 11 Jun 2025 09:00:25 +0000
Manifest next update: Thu 12 Jun 2025 09:00:25 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: 5l+g9Gww26mGTfGziEdXdA6dV6dgqzQHFxmstXoLo3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:20:71:15:4e:77:44:55:17:14:dd:f6:25:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Jun 11 09:00:25 2025 GMT
Not After : Jun 12 09:00:25 2025 GMT
Subject: CN=5ae83d85d51f63fb04e2d491f744b136966f34bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:5d:62:3a:93:f5:38:e7:36:98:3a:17:5a:
f5:68:eb:e1:60:05:03:b8:33:74:47:ac:8e:d5:a5:
3d:8e:fd:4d:d2:36:2b:dc:29:8f:e6:5f:22:08:3d:
2f:7e:d6:42:de:f0:74:3f:18:57:0d:90:e1:b0:da:
d4:1f:a8:23:5b:b0:77:db:2b:ae:29:df:1e:17:e3:
3b:0b:dc:01:8a:71:6a:9f:b3:41:1f:bd:8b:f3:bb:
03:32:60:ab:31:4b:ff:39:56:99:53:ae:19:99:6c:
5c:43:1c:f8:95:3f:bd:df:aa:08:d0:b2:7e:9f:a4:
e0:86:56:dd:9b:83:34:f1:08:de:b6:07:d5:3d:91:
a2:ab:48:ec:41:03:22:40:c9:65:92:32:a6:4d:48:
e2:98:20:c2:b5:b4:95:b1:9a:e4:76:9a:21:57:a1:
4c:92:f8:9b:fd:59:88:80:41:7b:2f:c2:2f:97:99:
45:6b:ba:b8:a7:cd:55:79:43:ed:5d:c8:c4:0e:a1:
32:c6:72:71:1b:b7:49:67:71:7f:8f:2b:c3:7b:ec:
1b:da:2a:60:8d:0b:01:68:b9:3d:58:5e:35:0f:01:
ed:52:60:cf:02:bc:7c:03:30:5d:9a:f8:c4:af:0f:
0d:63:20:1a:a0:5d:2e:f3:19:dc:60:23:6b:c0:44:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:3D:85:D5:1F:63:FB:04:E2:D4:91:F7:44:B1:36:96:6F:34:BF
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e6:3c:74:8d:fa:c1:f0:4c:86:75:5f:3e:ba:ee:2a:00:38:
b9:a2:a1:d8:30:e3:02:52:db:35:8a:51:81:a8:9c:75:5e:35:
3b:6e:a4:86:2a:4e:06:f1:8f:9e:7a:f7:f7:97:c1:d2:3c:9a:
94:81:1c:ba:f0:e4:61:df:1b:4d:0c:1e:1c:8f:4e:58:1b:ba:
c5:fc:aa:b6:bf:56:b3:8c:04:21:13:75:4c:f4:1c:b1:07:4e:
86:b4:47:5a:b1:5c:9a:95:ba:6b:6e:2d:da:d3:3a:2c:34:13:
9b:a9:af:21:7e:fd:d0:cc:d8:0c:29:a4:a5:1d:17:bd:64:40:
b0:1e:2a:2e:d5:29:bc:ad:3f:d5:cc:df:28:35:b6:cc:61:ad:
7d:ff:13:af:99:ab:69:2d:41:7f:47:16:82:c6:a9:d5:93:16:
f9:5c:90:2f:17:21:b5:85:6d:dd:52:84:7d:60:86:e0:bf:f8:
c4:53:e9:cb:82:ad:33:18:3b:1c:f5:56:71:57:40:1e:2c:ce:
78:37:2f:4b:5a:63:4f:5d:2c:8d:24:0b:ba:05:49:e2:1c:be:
f6:e8:52:6d:de:2c:79:8f:61:57:40:58:5a:db:cc:4e:a9:f1:
17:21:45:2b:7f:89:d9:65:7f:6c:04:cd:0b:ac:78:d2:b2:04:
d5:36:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:04 2025 by rpki-client