Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: u3irkOPgTuu+ke0sb1+1QPVD+pykp3G/A146wII/CtI=
Subject key identifier: 5F:A6:D6:1F:CC:8B:37:E2:AB:02:DB:C2:AB:FD:79:84:3F:F8:86:47
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 019748F9E703A8A95967041B4B8064BF8E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: kfS0j0uzrSfezxHjdCj/x2Ao+Crgeh5jenUwvVO2J98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e7:03:a8:a9:59:67:04:1b:4b:80:64:bf:8e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=5fa6d61fcc8b37e2ab02dbc2abfd79843ff88647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:99:b6:86:2c:ed:49:c7:25:24:45:15:a8:
37:7d:7f:15:ec:41:3b:7b:00:3c:9e:be:ed:f1:47:
23:86:52:17:e1:28:b7:44:cd:0c:23:cc:d1:d6:0d:
2c:7a:03:07:00:66:5a:2e:cf:b4:84:31:dd:af:70:
f5:a5:d4:c8:27:8a:35:9e:7d:2c:a3:52:63:d0:a0:
83:5d:a3:9b:cc:93:47:8b:7c:af:e6:f7:9d:b6:36:
d1:be:43:c1:25:e5:7b:5d:32:13:90:ab:b7:50:05:
9d:1e:71:c4:3b:0b:54:0c:28:a8:d1:ed:55:91:9b:
ba:66:72:de:2d:ef:22:78:6d:f6:c7:e0:59:7e:06:
2d:62:02:47:fd:53:76:e5:0c:b6:44:04:97:4c:35:
a6:cc:c9:b9:08:db:58:03:b7:5c:8f:ed:69:9a:84:
33:64:71:c3:c9:ec:31:be:ac:b0:db:93:96:fd:ab:
30:e6:51:b5:15:54:3a:38:8a:60:07:a8:b8:30:d0:
b3:9f:2c:68:cc:20:03:c0:eb:e1:7f:1b:43:83:d0:
74:d9:2c:4a:f6:e4:ef:be:e8:38:c9:4f:63:60:14:
61:71:d3:b3:11:26:65:94:9c:a1:30:e2:43:10:80:
41:33:66:82:59:c6:ba:9e:a7:c9:03:e7:8c:91:2b:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:D6:1F:CC:8B:37:E2:AB:02:DB:C2:AB:FD:79:84:3F:F8:86:47
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:63:3d:49:02:0e:1d:e3:63:43:af:60:cd:1e:a7:ae:4e:09:
3a:5d:42:4f:00:03:4c:7a:00:29:82:de:fb:77:ed:da:b5:19:
4c:ab:44:aa:eb:b2:22:5e:20:d0:08:d4:ad:75:f5:c9:1d:26:
b3:f6:b2:a4:4f:91:98:50:23:d9:68:41:b3:ee:40:00:46:ec:
30:e7:39:b4:09:83:ec:cc:78:ff:2a:3c:b1:45:61:64:d5:c1:
e6:fd:0c:95:62:92:9c:94:46:65:04:1f:51:c4:67:64:9c:fc:
b0:5d:19:bc:27:01:0e:ca:5e:e4:bb:10:d6:88:28:7c:65:83:
ec:fb:a3:45:3b:45:0d:ec:aa:d7:1b:69:4f:72:ed:34:42:cc:
a8:92:c7:e3:9a:fd:25:14:9b:97:3a:0e:ca:cc:42:bd:82:3a:
95:f1:67:dc:3a:b3:5e:55:ee:03:7b:90:f3:0b:73:20:20:85:
e1:53:98:cb:8e:d6:13:91:8b:36:6d:26:63:bc:4b:56:8c:1c:
d0:de:5d:21:bc:c4:ac:af:78:1b:1d:7e:b4:92:d4:7b:8b:ea:
0a:2e:36:40:e2:ec:2c:fd:f1:c6:22:1c:4a:3f:89:66:53:99:
bd:35:d5:1e:ef:0e:df:a9:3a:0f:25:6c:15:b3:91:a1:8d:e1:
f0:f1:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:31:08 2025 by rpki-client