Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: KNpEb1pLJEd0ITF6Yoln9RDf+32tMopiTpgfy9yqoJE=
Subject key identifier: 62:D1:17:FD:D1:B9:DE:B5:F6:24:C2:0C:58:03:FA:B3:0B:4E:BE:6F
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 01974931439BFF71C5453A64139448903911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 039E
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: SCGYKJNHAO7upiEo8Py4V4vfSzxIJNxqp1Z1bqpsOTE=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:43:9b:ff:71:c5:45:3a:64:13:94:48:90:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=62d117fdd1b9deb5f624c20c5803fab30b4ebe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:da:52:1b:95:d9:dc:08:a9:c9:d7:63:a1:
e5:81:19:1c:11:cb:bf:ef:f4:c3:4c:13:01:30:83:
fa:c1:32:95:3c:b3:2b:6b:53:2b:74:51:b9:b7:6a:
f7:04:2c:f9:3d:34:17:9f:24:ad:03:ee:58:fc:3a:
7f:8b:22:52:e2:15:88:88:79:4b:1e:65:be:56:31:
86:87:2e:a8:78:85:a5:d0:3a:2c:d0:63:5f:d0:da:
e5:ef:90:a8:f8:fd:83:ee:f3:47:36:f8:32:3a:16:
2f:fa:3f:f6:4d:12:87:c2:c6:e1:c2:8d:68:e6:79:
02:81:2b:a8:ca:25:6e:b8:f5:31:ca:13:a3:4e:fa:
c2:83:e9:8c:6c:a4:cb:25:a6:7f:fd:c7:4f:18:6b:
0c:a0:5a:3f:ea:bf:bf:35:ff:1b:49:95:b9:87:4a:
3f:c3:d5:7f:dd:87:53:9a:76:ba:31:cd:34:c0:7a:
a0:33:59:61:1f:16:65:62:ab:e4:8a:4c:9d:5b:b3:
8e:39:8c:b8:fa:47:26:e5:50:c6:a2:66:3e:99:69:
0d:cc:e9:1c:e3:8b:b0:a6:77:f2:43:fa:b4:25:9c:
2e:fc:dd:e3:f0:32:1b:a7:4a:d8:76:4f:c9:f6:2b:
c1:e6:93:24:fe:7f:66:ea:28:54:7c:fc:45:ef:7c:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:17:FD:D1:B9:DE:B5:F6:24:C2:0C:58:03:FA:B3:0B:4E:BE:6F
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:9a:41:9c:67:84:c4:7d:3a:e2:6b:19:cd:b2:21:74:e4:
cf:ac:ae:ff:d9:72:01:82:9a:5d:90:4f:5f:c9:42:c3:9a:58:
8e:fd:e1:57:ff:2d:f3:0e:c2:ed:61:5c:7b:1a:69:f9:2c:ea:
78:46:57:ae:6a:25:49:70:6f:ca:5b:b6:8d:bc:1e:f5:10:61:
6a:fb:24:a5:00:c9:a8:c7:d9:6a:00:30:a3:61:b6:c6:b4:f1:
f2:54:8e:f4:52:cc:16:ee:6c:91:82:80:4a:43:af:ea:94:36:
80:db:10:f5:4a:1f:54:bf:16:18:13:53:87:69:c2:cb:41:09:
ae:73:46:79:0f:eb:66:b7:f8:73:5d:f2:0c:be:bb:cc:76:61:
3d:7c:d2:46:95:7d:b1:04:fa:01:b9:1c:9b:9f:d4:96:25:ec:
ca:48:52:1b:cf:df:17:68:2f:5b:77:e8:ac:a7:b1:c8:b5:d3:
52:8f:cd:1b:86:93:be:08:24:c1:f0:2e:0a:6e:84:62:b1:75:
3e:ca:32:db:c1:54:2d:d5:71:08:36:bc:d5:68:83:00:c9:c4:
c3:46:5e:57:fd:6e:da:10:c8:d3:cf:5a:fb:83:51:c7:4a:37:
bf:f3:78:df:22:50:c7:bd:d0:e5:27:37:3c:3f:3e:54:e6:35:
92:9b:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:22 2025 by rpki-client