Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: R6mofHvN/GnSFjp/FtNg7b3fhQ14T/pqNRYQSQaX4s4=
Subject key identifier: AB:FA:97:69:6C:D0:2C:B6:EE:11:0E:6F:73:DE:BF:DF:95:A4:67:92
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 01974C698232CCA6C4015CA596EE4695FCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 145C
Signing time: Sat 07 Jun 2025 22:01:12 +0000
Manifest this update: Sat 07 Jun 2025 22:01:12 +0000
Manifest next update: Sun 08 Jun 2025 22:01:12 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: RMDNZQfKMIsNAyHbhVu4I29lyJ3e/aXsgV8iA1mn1jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:82:32:cc:a6:c4:01:5c:a5:96:ee:46:95:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jun 7 22:01:12 2025 GMT
Not After : Jun 8 22:01:12 2025 GMT
Subject: CN=abfa97696cd02cb6ee110e6f73debfdf95a46792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:de:e3:2d:35:cf:9f:5d:cb:a8:c1:31:90:
e8:16:7e:a0:83:3b:98:e5:b5:33:ee:4b:88:86:6c:
7b:19:d8:fb:72:ea:be:26:1d:4f:0b:60:fd:6c:fa:
71:70:13:7d:16:47:80:1e:35:16:1c:43:c3:58:b5:
57:bf:bf:e5:7e:84:0c:13:ff:66:f0:e4:67:f0:9c:
7b:09:5c:c3:56:9f:40:f9:bf:14:cb:d2:bc:2e:c0:
28:f4:3f:6a:94:d5:65:88:b6:a4:2c:80:72:cb:55:
38:45:d2:61:3e:90:01:46:27:83:5c:26:55:c7:53:
da:bb:e8:a2:0c:04:1a:f6:fc:f5:eb:ed:58:03:56:
68:93:e7:8c:40:e8:21:2a:95:1a:37:2d:72:d9:c9:
05:f5:f4:67:70:80:12:e1:ae:89:2c:25:7c:e9:e4:
00:1d:67:88:af:80:49:1c:be:80:22:65:3a:0f:9e:
58:11:d8:ef:e3:2c:ab:cc:0e:4c:33:14:02:47:80:
b3:22:7d:ac:22:2a:58:04:b3:6a:a1:7c:0c:09:86:
08:84:26:01:d3:a3:50:23:cd:39:fd:9c:c1:c5:4a:
3a:2e:79:57:06:ff:4e:84:55:33:ff:40:19:ff:80:
5c:30:61:a8:6a:ea:f0:93:56:2f:d4:4f:02:1c:35:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:97:69:6C:D0:2C:B6:EE:11:0E:6F:73:DE:BF:DF:95:A4:67:92
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:66:ff:64:ad:34:46:50:0a:e2:c8:ef:f3:20:39:6e:bd:fb:
cd:4e:c9:57:20:8d:af:5a:bc:02:c8:70:9d:d4:a2:cd:3d:e1:
d3:64:6c:03:d2:d4:9a:a8:5c:e8:76:1b:08:43:97:b8:48:7f:
54:dc:13:2c:ca:7a:69:cd:97:0d:a7:7a:74:0b:53:dd:7f:68:
93:0c:92:59:26:70:f6:54:dd:7e:a9:a9:fd:d2:4e:6d:e2:04:
11:c9:f5:5a:0b:34:e0:71:e3:2d:be:0b:13:f2:a4:08:c0:0c:
47:7b:29:af:4c:4b:d3:ee:ff:a8:b5:ef:d6:57:af:90:5c:df:
50:45:62:15:49:75:64:e5:44:a7:88:92:33:83:ed:b4:00:e7:
97:d3:e3:7f:42:1b:97:14:d9:91:06:70:50:75:8f:73:5f:09:
a6:2a:d9:45:a6:7f:4a:6b:54:08:8c:2a:fa:07:f1:f1:53:28:
03:28:43:06:b0:c6:41:3d:6b:87:46:d2:c9:3d:79:65:0a:6e:
58:fe:69:d8:79:cc:22:92:57:8b:a6:87:9f:47:18:b4:43:15:
cf:33:da:9e:bc:b7:8c:ec:a9:49:3b:f4:c7:10:32:8c:b4:a5:
c2:f3:62:41:54:02:48:25:64:fd:74:e1:c3:46:e7:2f:8b:d8:
54:f8:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:53 2025 by rpki-client