Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: KP86aN/ghV6JjNd4yDa4ZQ9odNYLq66azPd2L6yIILY=
Subject key identifier: EC:0B:02:57:36:A9:65:52:11:21:CD:C5:F4:16:5B:17:E9:7A:F1:6C
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 01974AE848D8892F12313C84B097E5D8C7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0C17
Signing time: Sat 07 Jun 2025 15:00:26 +0000
Manifest this update: Sat 07 Jun 2025 15:00:26 +0000
Manifest next update: Sun 08 Jun 2025 15:00:26 +0000
Files and hashes: 1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: lYqxkK6itWscE/dWO248mWM4L/z1FQoxPr9DRrj2kzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:48:d8:89:2f:12:31:3c:84:b0:97:e5:d8:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jun 7 15:00:26 2025 GMT
Not After : Jun 8 15:00:26 2025 GMT
Subject: CN=ec0b025736a965521121cdc5f4165b17e97af16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:ef:f2:bc:01:54:7e:cb:8b:cf:2b:fa:f2:
fb:20:6d:8e:f4:7b:c4:56:94:27:b2:68:ff:81:17:
72:72:e0:53:2c:fb:69:b8:a6:ab:49:63:2b:4a:cb:
1b:2a:39:a3:d9:dd:67:f9:80:ef:4b:82:e6:8e:b3:
89:8b:f7:31:f1:0e:6b:1c:74:85:42:7a:29:69:bd:
f3:bb:5b:72:31:f6:5e:d2:a3:c6:16:cc:34:78:7a:
de:b8:91:32:67:4e:12:80:f8:2a:56:a1:2e:75:a6:
f4:41:c9:60:cc:f0:ca:80:b7:b0:14:9b:33:5e:a7:
18:cc:b7:f8:6a:52:0d:94:32:fe:c3:a8:8a:9d:3b:
65:d3:e2:93:fc:5c:31:06:c9:02:bf:f1:7d:d4:6c:
34:2a:d0:14:12:ed:d3:d0:b3:e4:8f:4a:28:04:a8:
cf:27:a6:12:43:1f:43:0d:ba:dc:d6:f4:e9:c1:26:
2e:3d:d8:1a:ff:50:29:b4:a3:10:58:8e:c0:e7:62:
3f:35:c7:b5:ff:3a:a8:c8:b6:64:64:b7:2f:2b:95:
f7:e4:99:4c:db:dd:c2:b3:ab:5e:47:02:10:7a:10:
eb:ef:46:52:f5:77:ce:0c:12:8b:8b:35:54:57:87:
37:ab:d5:a7:ff:64:4e:08:65:a8:bb:d3:6a:82:01:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:02:57:36:A9:65:52:11:21:CD:C5:F4:16:5B:17:E9:7A:F1:6C
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f6:2c:40:fa:6d:e0:16:5e:06:4f:63:60:14:48:86:44:f0:
9d:99:1c:fb:f7:9b:ba:9f:28:39:12:ee:f1:64:85:c8:28:9a:
11:2c:2b:7c:39:81:9d:bc:3e:b0:6e:35:c8:74:f0:ba:b3:b5:
43:ff:18:47:ed:58:37:cf:a3:12:37:5c:30:ee:a6:a9:97:b8:
2c:4d:9a:43:2a:64:1b:99:ca:d9:55:5b:e6:5d:a3:bc:52:2e:
a2:7b:c6:b9:b1:a6:16:f7:d1:5f:a2:11:0d:4e:c9:b3:38:bb:
e5:d5:03:ce:bf:96:3a:04:d2:33:f3:d4:2b:d7:52:64:60:a6:
82:ca:d0:5f:11:d2:12:d1:a7:f2:f4:f1:d0:fd:0f:f0:ff:91:
53:3d:e8:a3:e6:75:b7:40:73:9a:07:ee:ec:e9:b6:b5:c1:fc:
1d:c0:eb:2a:10:a5:5c:d8:fb:ae:de:c7:02:94:4e:ab:41:a5:
d7:39:bf:29:5a:dc:96:19:31:63:1a:0e:ee:7f:19:37:57:4c:
2b:b8:59:85:b8:0c:2a:37:d5:47:e0:1d:bf:fc:40:7b:54:b5:
8c:9b:76:a8:4d:3a:ac:d9:60:f4:70:55:dd:41:f8:88:24:15:
14:66:69:50:72:d9:d6:4c:55:f6:a7:be:35:a0:c1:b3:39:76:
b8:22:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:26:34 2025 by rpki-client