Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: AsEm/Q9mNyMJpEZchVyu5qA7l5b42gqcBfXq4c4CZvs=
Subject key identifier: F0:EB:F7:30:28:8D:5A:98:85:DF:B5:40:05:56:CB:92:6A:F7:AF:E2
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01974E573A6729191D192637CC5448876DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 07:00:28 +0000
Manifest this update: Sun 08 Jun 2025 07:00:28 +0000
Manifest next update: Mon 09 Jun 2025 07:00:28 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: Cyb3hf7+TWsDtEJV1BG1JsZn6dgSHYktVbVt08m/64c=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:3a:67:29:19:1d:19:26:37:cc:54:48:87:6d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Jun 8 07:00:28 2025 GMT
Not After : Jun 9 07:00:28 2025 GMT
Subject: CN=f0ebf730288d5a9885dfb5400556cb926af7afe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:d8:22:b9:21:f4:52:e6:60:9f:2f:ef:de:
09:c5:aa:67:b0:47:33:9e:da:e4:3f:1a:a6:8b:a6:
37:d0:f0:2b:6d:67:62:66:31:9d:c4:7c:32:11:c4:
d0:7d:3e:d7:84:17:21:44:4c:7f:85:35:45:ae:b6:
cd:5a:d0:45:97:c3:ca:6e:e4:86:08:79:3b:2e:30:
d2:78:a2:aa:28:b3:23:c8:2b:5f:cb:0d:04:9f:1f:
35:c4:28:06:bc:23:90:a8:da:f5:e1:6e:83:9f:07:
b7:2d:fc:a9:28:31:cb:d9:43:5f:0f:7a:b7:0c:58:
50:33:0e:cf:5e:9e:d6:b7:00:1d:33:83:85:9f:04:
b0:91:20:9b:5e:7d:a6:e9:43:f8:23:d9:06:f9:64:
2e:c9:d7:92:27:bb:72:2b:cb:17:11:62:58:7d:17:
d3:03:ec:02:68:91:bf:c1:25:a8:83:82:2b:5b:05:
de:db:7c:9b:3a:8a:7c:ba:f1:bd:a6:c4:c5:0b:e0:
7c:53:a1:f4:f0:09:55:a3:a3:c1:e9:8d:ac:89:21:
95:ad:f9:96:e5:82:b4:de:47:9e:aa:87:65:3f:b5:
e3:8b:0b:ce:c8:8a:36:73:df:ff:6c:e8:63:b0:0f:
8d:b1:24:ae:01:c0:a5:3b:be:e2:e8:a7:4e:fb:d3:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:F7:30:28:8D:5A:98:85:DF:B5:40:05:56:CB:92:6A:F7:AF:E2
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bd:54:0a:ba:e0:09:50:d5:33:68:ec:00:af:22:48:b3:a3:
31:93:73:89:87:7d:ab:ab:47:ff:a1:8c:71:08:85:00:ca:e5:
a8:22:37:6e:56:bc:84:05:84:9a:0e:09:28:ca:da:a0:0a:0f:
19:73:d3:79:72:68:ff:82:93:f2:4f:b7:7a:fb:41:f8:b7:69:
47:d6:f6:08:83:6c:97:10:50:78:ad:6f:4e:06:31:59:7b:ce:
70:ca:b3:28:0a:25:0f:65:1b:b2:75:60:02:6a:b1:cd:4e:41:
be:24:7d:62:c7:fb:1e:93:c0:63:52:7a:7a:b6:e6:1d:9c:0a:
19:dc:1d:ed:10:b8:94:29:1e:e0:c0:c6:7b:a7:d8:ec:75:36:
f4:a4:a8:5e:10:cf:4b:6d:68:f0:cc:9b:21:1f:92:e1:78:9b:
0d:07:e5:c2:e9:a0:22:fc:8f:7d:78:71:13:72:5c:52:88:c1:
f9:22:13:ad:79:74:ca:d0:a2:8f:91:ed:a0:a8:6d:58:95:f1:
38:c1:ed:ce:3f:bd:c4:b6:d0:69:71:aa:24:4b:7e:e2:14:a1:
79:00:b3:38:07:93:87:3b:9e:9d:0b:e0:03:36:f1:50:f4:f9:
5b:98:18:f2:d6:74:f3:63:0e:93:7f:17:ff:93:40:92:35:b2:
f0:c9:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:04:53 2025 by rpki-client