Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: ppKJBqlClLNZd/hTlCUn7QARtosCGBPiJcYCo6EFe0U=
Subject key identifier: 98:46:09:AF:1B:C2:56:B7:F2:89:32:01:C6:F5:5F:BF:B9:47:57:7C
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019748F9F19D7B211B6E607582C634E34DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0928
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: xoQSw4ScSTGTrPN5pr0pdoyO+w0NToYngKu8XhGgMAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f1:9d:7b:21:1b:6e:60:75:82:c6:34:e3:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=984609af1bc256b7f2893201c6f55fbfb947577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:4f:74:1f:6b:8a:96:cf:2d:d2:3c:a1:14:
44:51:2e:d2:e0:de:e7:93:88:be:f2:1c:4b:67:c0:
bc:04:39:a1:78:19:e6:9c:11:6e:20:f7:2a:16:e3:
06:3a:bd:2c:c0:73:6c:b4:fd:61:6b:b7:08:0e:e6:
5e:ad:9b:ad:2b:f6:1b:f1:83:a9:b3:dd:6a:81:1a:
0c:d5:0d:ff:a4:3a:2a:df:e8:e8:2b:c2:62:19:cf:
9c:b9:6d:10:a4:40:55:5b:94:95:83:e8:fc:95:f2:
4f:39:c4:ad:0f:cc:96:cf:a4:f0:25:a3:98:bf:b1:
02:ab:4a:af:8b:7d:bd:db:9d:49:01:50:bf:65:bd:
e0:28:09:e6:ec:da:b5:ab:bb:b5:dc:d2:f3:06:21:
b7:ca:c5:5a:8f:eb:fe:2e:45:78:0b:87:e7:4f:40:
ff:e7:97:53:82:c7:8f:4d:27:65:5c:34:b9:29:ef:
4e:88:1e:45:2a:82:91:6b:22:3e:21:df:29:db:da:
ab:ef:73:49:4c:c4:2a:79:65:3e:78:19:2f:f2:b1:
18:ee:18:87:3e:b4:fb:e0:a9:d9:ec:3d:c8:2b:08:
28:cf:8a:7b:ca:24:4c:4b:d0:48:60:63:42:17:c7:
18:da:b9:4e:85:fa:f3:b0:8b:48:cc:69:76:c1:e9:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:09:AF:1B:C2:56:B7:F2:89:32:01:C6:F5:5F:BF:B9:47:57:7C
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a4:e2:71:c4:24:ce:21:11:07:4a:87:87:b1:15:37:c2:d4:
e9:e5:f1:84:fc:b8:7c:6d:33:6e:e5:27:c8:b9:8a:14:fa:d7:
ea:71:a7:b9:39:7d:cc:15:29:47:96:1f:9c:81:4a:42:5a:2d:
27:74:e5:e8:da:9f:a7:b0:83:8f:bb:70:7b:d3:e2:b7:9f:43:
77:8b:12:5e:85:94:c3:09:6e:c9:c0:19:6e:22:04:33:74:91:
e1:49:76:7d:fd:47:e4:3c:19:77:71:5f:68:5b:01:90:ad:0d:
7d:bd:58:aa:0f:8f:c2:95:05:db:31:b3:85:fa:fa:8d:09:e3:
ca:a2:cc:d0:75:e9:2d:41:1a:cc:e6:9c:2c:8e:2c:4a:fa:c8:
b7:e3:a9:63:2b:2e:66:1c:a5:61:71:e8:ca:d8:7b:4f:e9:cb:
13:44:7e:a6:b6:98:54:c2:a9:16:1a:5d:3b:48:72:33:19:a3:
7e:eb:c3:d9:c9:b2:c0:d8:b5:05:f4:c4:83:01:8b:89:08:01:
8e:75:12:80:3f:00:46:08:f4:39:8d:41:ef:7a:2e:59:01:c4:
4d:b5:fa:32:b2:2c:43:fc:59:50:55:88:a6:00:78:21:6c:2e:
a0:33:c0:b3:a9:a9:38:7e:bc:41:5e:fa:a1:5c:56:ce:30:03:
c3:f5:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:59 2025 by rpki-client