Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: ba1eumfVj5SNrl5rMpFv9UBtyISVgNGEPnwge36TgsY=
Subject key identifier: 9A:43:23:C3:83:3E:36:98:69:8E:83:B1:79:27:36:A4:A5:1E:A0:FB
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0197518F1F9094CD6B4EA6C96524167D589C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 0621
Signing time: Sun 08 Jun 2025 22:00:23 +0000
Manifest this update: Sun 08 Jun 2025 22:00:23 +0000
Manifest next update: Mon 09 Jun 2025 22:00:23 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: MUvKSnFAPIw6A9rmwBwgr32jOogkuRfubXCTPN/uF1s=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:1f:90:94:cd:6b:4e:a6:c9:65:24:16:7d:58:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Jun 8 22:00:23 2025 GMT
Not After : Jun 9 22:00:23 2025 GMT
Subject: CN=9a4323c3833e3698698e83b1792736a4a51ea0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:75:72:8f:2e:17:2b:45:d0:7f:85:f1:28:
b0:7e:d2:d0:10:a6:6d:62:2a:7e:77:7f:89:d9:8c:
f4:ce:38:d9:bb:43:66:33:da:46:f1:3c:61:3b:f4:
e9:41:3b:6f:6c:2a:42:c6:bb:25:74:e4:e0:f3:d1:
ef:db:d7:0a:31:68:c9:19:06:8d:9b:42:fb:35:a4:
fc:90:90:62:84:c9:d9:bf:e5:5e:28:0a:d2:c1:47:
a6:53:aa:a7:f2:ab:7e:ed:b4:4d:82:9e:a2:3b:42:
38:74:3e:05:db:9a:25:b9:02:cb:c7:fa:5e:25:20:
d1:76:8e:29:15:17:bf:59:79:94:b0:b6:86:bd:4b:
64:c1:48:43:2a:b3:7e:3c:6d:33:fa:fa:a8:3c:3c:
df:5a:91:21:a8:c5:3f:f7:d9:71:8b:72:0a:d1:37:
12:b7:d0:4e:ba:11:fc:72:fa:5e:b1:97:9f:f3:77:
9e:56:67:4c:31:e4:d8:05:4f:99:fe:84:4a:27:c3:
6f:e5:49:76:05:8d:13:b7:b2:19:d7:82:23:ba:6c:
64:37:15:b0:09:ff:fb:d6:54:91:fa:bc:07:1c:8d:
ad:18:c6:14:fe:cd:38:8f:b3:21:b0:35:7a:ff:c3:
94:9e:33:fe:39:cb:f4:a0:95:06:1e:e0:6f:5c:b2:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:23:C3:83:3E:36:98:69:8E:83:B1:79:27:36:A4:A5:1E:A0:FB
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:aa:dd:1e:16:7f:ed:26:59:e9:50:60:79:14:3e:72:f7:
e4:b3:6c:55:7d:f7:24:ad:8c:f0:07:04:7f:30:b8:2e:55:ff:
c4:1e:ea:88:16:2b:c6:48:d0:bd:6b:79:96:2f:97:b1:f4:82:
b2:0a:a3:70:3b:27:f1:f2:be:24:39:63:e0:c9:0e:7e:45:30:
c6:7d:13:66:ff:29:39:31:ed:56:75:32:47:0f:c3:3f:9a:0a:
fd:76:9b:37:89:88:06:19:cd:a3:10:06:83:4a:4d:27:b5:5c:
73:16:35:28:76:7d:0f:b6:c3:3d:e6:bb:6b:90:2d:af:f6:48:
cb:25:e6:97:1a:d6:4d:53:19:f4:6d:cd:af:c5:9d:6c:ea:70:
a5:2f:f3:05:c0:b1:dc:03:a2:47:d3:92:1b:45:f8:8d:70:a0:
33:b1:90:18:b0:a3:80:4a:22:c2:ef:e6:fd:aa:f4:a3:c5:40:
5c:36:5f:35:9b:8d:8b:70:f3:63:fd:13:39:12:d8:36:a0:3c:
1f:d4:f8:96:af:3a:ca:56:d8:2d:ca:fb:02:e9:94:3a:35:f2:
2e:ce:c7:31:b2:11:80:aa:09:da:c3:bc:61:87:cb:3c:f9:c1:
c6:56:d9:cf:f6:17:8b:d1:4a:ae:e3:58:44:34:e2:7b:24:f7:
1d:99:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:01 2025 by rpki-client