Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: +7UDC7nPdW3s51sRdRUwrwkqI1Ct+YjheUkIIfodE+E=
Subject key identifier: F6:08:21:5A:4B:52:04:3D:AA:1E:38:D6:0F:74:92:B0:64:3B:38:5D
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01974C692E86F5F3110E03D55C62A3264FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 22:00:50 +0000
Manifest this update: Sat 07 Jun 2025 22:00:50 +0000
Manifest next update: Sun 08 Jun 2025 22:00:50 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: pj64rBneg4HJZAvmRiwxFw9SNIwH3a6V33shth1uWqI=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:2e:86:f5:f3:11:0e:03:d5:5c:62:a3:26:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jun 7 22:00:50 2025 GMT
Not After : Jun 8 22:00:50 2025 GMT
Subject: CN=f608215a4b52043daa1e38d60f7492b0643b385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:21:c0:a7:88:8f:4f:70:b3:0b:87:14:8f:
81:f0:7c:75:55:fb:42:32:89:9c:f8:e4:2d:ac:34:
ff:56:f6:c0:c6:56:7d:62:39:de:85:dd:23:80:8d:
c2:fe:74:87:bd:7f:06:d3:b2:36:ad:bc:2e:1c:bb:
eb:d1:55:97:c6:ce:0f:1e:30:16:2d:9d:a9:59:05:
fc:97:37:1c:18:d8:b5:a6:2a:e9:89:39:db:90:41:
a0:b2:ea:a5:d3:2e:1f:65:ef:bf:1f:88:32:2b:a7:
96:f6:6f:ef:0c:72:19:5a:98:0e:0c:c8:0d:ef:5e:
49:44:a5:17:49:d6:52:c6:79:e9:29:a2:1a:80:90:
54:50:d2:88:7f:5d:28:16:f3:6b:b6:5a:1f:82:05:
4f:2b:fa:3b:bd:a0:eb:dc:75:27:5e:be:7f:92:2e:
ac:4e:91:02:33:5e:d8:cf:76:e0:bd:1f:2e:d9:6f:
d7:3c:84:6e:e2:b3:49:4a:13:e0:bd:c6:63:dc:fc:
a5:93:bf:01:8f:32:b5:c4:db:30:17:b0:9f:5a:a5:
90:ce:a1:d2:87:6e:b8:3c:00:0f:e8:f9:8e:96:4b:
41:f7:2e:09:e1:6c:c3:53:fb:cf:19:ad:b8:24:ec:
13:50:0f:ed:d0:3e:e8:7d:b2:69:79:76:b1:60:01:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:21:5A:4B:52:04:3D:AA:1E:38:D6:0F:74:92:B0:64:3B:38:5D
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3e:8e:cc:7d:05:f9:e2:57:28:46:4f:ca:d2:72:51:59:11:
e2:94:f9:03:f0:6c:11:b0:ad:88:ca:d5:8c:64:b5:70:7e:34:
6d:95:24:28:36:00:37:41:4e:63:da:41:c4:a3:fa:2d:60:75:
a7:1f:7e:72:3b:6f:b8:18:31:8d:b5:0b:66:1a:af:70:8c:d8:
ba:32:e3:7b:4a:16:0d:8e:ce:e3:ac:c8:8d:f8:99:36:fb:0e:
7d:a5:80:58:79:ab:94:24:b7:3f:9e:15:17:01:98:1c:ec:51:
a3:f8:7f:f4:72:d2:99:7a:f1:55:1d:00:33:73:b3:24:50:a1:
0f:1c:d4:e1:3d:54:78:8a:1a:82:9b:62:d8:da:dd:fa:73:e5:
22:5e:88:f7:70:c3:eb:80:ed:e8:18:9d:5d:ca:f6:89:05:53:
a0:5f:cc:b8:6c:67:24:db:bb:e1:ec:12:e5:86:2a:cf:5c:3d:
9c:a7:63:c0:44:76:c8:4b:2f:93:fb:72:49:85:5f:00:11:42:
36:dd:d1:f7:cb:2f:52:18:2e:b0:23:09:5f:92:eb:7f:f7:16:
c4:e3:6c:1e:6f:89:f4:8b:81:5d:f2:81:8f:9f:2b:ab:9a:1d:
b0:10:1c:98:60:74:aa:67:d2:e7:44:7f:3d:45:9c:fd:45:80:
38:36:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:47 2025 by rpki-client