Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: vv5AJvpASE3pXgFptq5Dl8Np0/38jCsna7RPEPYR4zc=
Subject key identifier: 2C:B4:E0:BC:93:9B:E5:28:2F:45:3D:7E:70:21:65:D3:E0:FD:80:6E
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 01974F331901D462DA6301C214FB84BAAF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 11:00:38 +0000
Manifest this update: Sun 08 Jun 2025 11:00:38 +0000
Manifest next update: Mon 09 Jun 2025 11:00:38 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: xmYo09QKd3C8X3sbWywKo+Od7EhMk3fQrmIcF1AsbZA=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:19:01:d4:62:da:63:01:c2:14:fb:84:ba:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Jun 8 11:00:38 2025 GMT
Not After : Jun 9 11:00:38 2025 GMT
Subject: CN=2cb4e0bc939be5282f453d7e702165d3e0fd806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:0d:72:68:24:99:47:88:79:eb:ff:99:da:
a7:79:61:d6:2d:08:42:fa:83:9e:18:ab:6a:2c:cc:
d7:4b:2a:ce:d0:69:0a:da:db:8b:53:71:e7:ff:68:
d5:6f:96:cd:8b:4a:2b:81:10:30:a6:fd:cc:c0:f2:
60:ae:6f:5b:fe:b6:19:eb:e2:c2:96:dc:e7:f3:1b:
b1:c4:b8:9b:5f:ce:a3:03:92:1a:e6:1f:a8:0a:18:
4d:21:15:91:20:25:99:a6:76:d0:fc:b9:58:a4:96:
b6:a5:e0:a8:88:b0:f7:ae:85:da:56:c8:ff:b1:4a:
f5:ad:98:38:75:74:65:39:71:0f:72:42:ae:c7:67:
bb:64:08:cd:af:98:a2:c6:d3:0a:be:52:6e:f4:46:
4b:8e:65:f5:93:0f:97:6b:de:7e:9f:c5:25:aa:2b:
c3:2d:82:dd:57:9b:03:10:2b:59:34:ad:e6:a2:e8:
7a:5e:b1:c2:29:59:a6:f8:c6:f1:01:ac:e1:a6:60:
2d:b0:bc:da:84:ed:c9:95:33:f6:00:a8:3c:20:34:
41:c8:c9:77:cf:bd:3d:0d:64:02:15:68:99:d5:12:
87:20:f3:48:ff:dd:99:49:79:cd:8c:02:c3:4d:17:
d4:42:03:b4:d1:25:62:0b:31:c1:69:34:a2:f9:a6:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:E0:BC:93:9B:E5:28:2F:45:3D:7E:70:21:65:D3:E0:FD:80:6E
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:a1:7b:e1:df:29:e1:3d:70:61:67:33:82:3a:11:03:5a:
6f:1d:44:64:e3:b3:1e:87:f0:77:14:30:90:4e:d7:c1:69:82:
80:b3:4c:a0:46:6b:7b:6d:4f:f3:42:4c:8e:32:71:4c:4d:4c:
cf:eb:8d:ac:97:9c:ce:6c:6b:8d:4e:af:c4:c1:8a:49:4e:52:
77:c6:a8:5b:21:25:f2:57:fa:77:28:b2:90:6c:fc:c6:af:a6:
c6:d6:a6:cc:b8:45:77:39:cd:e1:32:8b:4f:eb:ed:ce:18:83:
db:57:f9:7d:76:45:74:ac:42:4b:ea:18:bf:c1:65:d6:9c:8b:
6f:3b:80:62:c7:8c:d9:98:18:ee:39:ad:a9:7a:a9:13:32:8e:
0a:f7:b8:8f:23:22:a5:22:86:d9:ae:76:af:30:b8:96:70:b9:
46:f3:6b:f6:4a:6e:a5:e4:5d:42:19:b5:ca:ac:0c:94:a3:9b:
f2:21:e8:1a:bb:87:f9:e2:a9:07:57:ad:ba:4c:ab:4b:df:e3:
91:33:f8:65:1b:08:d1:f1:7c:b0:55:39:ee:b8:5a:a6:8f:5c:
8e:18:3f:a5:06:48:9f:fb:b9:ce:4e:a0:e2:d1:01:55:a7:57:
bd:35:8d:96:91:1a:84:79:51:3c:b0:8d:95:0f:3d:47:28:7a:
8f:93:7a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:34:37 2025 by rpki-client