Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: tCPaX0uua0Afcj9fUQ8QbHKmBbMYkd4kZ+ZedjBqlD4=
Subject key identifier: 59:72:9D:96:05:76:1E:6F:92:97:77:5F:0F:81:63:0F:87:B5:E7:72
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 01975FB8A6307DB54767D7BCF129C0E64003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 16:00:26 +0000
Manifest this update: Wed 11 Jun 2025 16:00:26 +0000
Manifest next update: Thu 12 Jun 2025 16:00:26 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: Pl0JUAM4o7Rbr0Y+zs0HAI29C7Q5TDYIhy1RqIlv2l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:a6:30:7d:b5:47:67:d7:bc:f1:29:c0:e6:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Jun 11 16:00:26 2025 GMT
Not After : Jun 12 16:00:26 2025 GMT
Subject: CN=59729d9605761e6f9297775f0f81630f87b5e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:71:ae:f4:7c:bc:96:30:91:dd:15:26:66:
70:ba:f6:77:a7:84:91:5f:cc:8e:69:23:2c:17:92:
df:51:22:57:b8:ad:e4:73:6a:8c:47:79:6b:96:25:
ec:ac:0e:7a:30:3b:2a:f8:03:16:67:51:cc:d6:b4:
f9:a9:b2:6f:51:80:ca:52:24:fb:19:60:f4:5f:ba:
e2:d8:81:b2:62:55:b4:86:a3:c9:d3:f7:48:d0:a6:
42:fe:80:02:3d:fb:d1:ac:9b:32:81:38:3e:26:ee:
73:02:27:64:ca:eb:58:1b:be:31:58:14:38:f4:69:
50:f6:56:9d:de:15:de:4f:64:d8:cd:c1:a3:0b:ca:
67:ee:29:9f:8b:4a:d2:3c:a6:75:b5:f5:3f:f7:4e:
0a:b0:d1:c8:d5:1a:ae:5a:24:b4:85:f1:01:5c:58:
04:c5:2e:02:3d:bf:e8:d9:ce:a2:0e:46:13:65:2e:
a1:17:e2:29:55:83:77:fa:26:f0:a3:86:8c:62:4f:
0d:a4:7b:d2:d5:1b:10:eb:3c:29:de:77:7c:64:1b:
96:3d:5d:8c:2c:14:72:02:b2:c2:7d:f6:e6:fe:61:
61:7e:af:b9:f1:2a:f8:9d:46:d0:fa:0b:a2:f8:30:
e3:87:fe:e1:56:72:72:fd:61:be:2c:7c:ce:18:d9:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:9D:96:05:76:1E:6F:92:97:77:5F:0F:81:63:0F:87:B5:E7:72
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:ac:bb:eb:3c:3c:66:b2:07:81:dc:5b:dc:a5:e1:35:ab:
54:18:70:f1:fd:70:38:8e:6b:8b:72:f5:ef:49:9f:c1:21:04:
1f:b1:bb:fa:bf:b9:30:f4:a4:f5:92:3e:ce:aa:ec:75:3d:10:
9f:d6:d1:0b:31:ba:21:15:1e:25:2d:ac:61:17:b9:62:b6:de:
cd:c1:99:8d:91:c2:9c:b6:4a:a9:d9:c2:9c:eb:4f:b9:4b:cb:
2e:99:16:8b:f7:8a:65:31:b1:03:a7:6c:ae:1c:f5:1c:df:c9:
a1:3a:8f:67:be:6c:cb:3b:f5:71:3c:ba:13:fe:7f:8d:3d:d8:
55:d5:dd:7d:f0:7d:09:f0:7a:02:1a:a8:ca:d8:50:5c:e5:cc:
2b:6a:cf:58:99:a0:5d:f4:60:8c:32:94:f8:e8:b3:d1:fd:e7:
75:64:5e:96:c8:a3:cc:57:1f:64:c5:f4:f8:ce:8a:af:9d:62:
8c:ad:2a:22:4a:e3:bf:75:f3:72:5b:bd:0f:de:3b:23:bd:15:
8b:f5:ed:e5:39:03:ab:f3:48:0b:73:2a:21:90:50:2f:39:b4:
88:6e:e5:f4:25:f9:7b:17:2d:35:a5:4b:c5:82:ba:8e:bf:07:
ca:8b:7f:67:56:72:97:12:71:ba:f2:ea:1d:22:b8:e8:79:0a:
6c:9e:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:25:37 2025 by rpki-client