Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: y7D8UCbh+XG3cWdeqFGvOfTdkehodsvkjsTx1bowm6c=
Subject key identifier: 6B:6B:00:33:9D:F3:69:B6:37:40:B9:35:87:8C:28:F5:A2:96:6A:86
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01974855043B52AFB72D8A4571D62A1470B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 0F9C
Signing time: Sat 07 Jun 2025 03:00:20 +0000
Manifest this update: Sat 07 Jun 2025 03:00:20 +0000
Manifest next update: Sun 08 Jun 2025 03:00:20 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: RHhcXMVxWNWFIdRmiZZn6yvec4HHp2duBwjyJ5EjO0o=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:04:3b:52:af:b7:2d:8a:45:71:d6:2a:14:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jun 7 03:00:20 2025 GMT
Not After : Jun 8 03:00:20 2025 GMT
Subject: CN=6b6b00339df369b63740b935878c28f5a2966a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:f5:80:20:f3:67:22:07:22:f3:3d:56:43:
04:3e:43:7c:09:04:66:42:c1:57:bb:be:84:c9:b3:
c9:e8:bd:15:61:f8:ef:02:c5:48:8a:17:bd:57:ea:
26:02:e4:0f:4d:91:29:cb:c2:00:50:8a:f7:dd:6d:
56:93:b8:2f:97:20:d2:c4:3f:9d:d0:a4:9c:a9:25:
68:72:cd:b7:e5:18:c1:a3:bd:ab:a8:17:c8:7d:ba:
de:3f:41:b1:50:70:7b:70:3b:d5:e5:fd:d1:e5:b1:
1e:11:2e:4d:6c:c0:33:23:2a:e3:f9:ff:22:0b:e7:
50:16:8c:fe:76:c7:44:c0:2c:2e:29:71:7a:45:3a:
d3:9f:32:b8:42:df:12:cc:e1:01:7c:ea:b3:b7:48:
e9:9e:2f:92:f3:cd:d6:bc:b7:31:5d:31:48:5f:34:
97:95:e0:c1:bd:3c:e6:b6:08:cb:dc:9c:5d:aa:30:
5f:e8:3b:29:7a:44:07:10:53:90:ff:7a:f1:8a:ac:
08:67:75:9d:e7:6b:7a:7d:66:14:86:6f:69:25:6d:
67:51:27:98:3d:01:7e:79:43:52:d7:d2:b6:96:57:
14:eb:69:1c:9c:93:50:ff:66:75:77:b9:4c:b5:dd:
1c:18:6f:87:92:57:a0:ef:df:20:a5:f6:8f:30:dc:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:00:33:9D:F3:69:B6:37:40:B9:35:87:8C:28:F5:A2:96:6A:86
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:bd:2b:2e:39:95:bb:d8:b1:57:ee:c9:97:16:27:e4:79:
0c:be:86:dd:8e:5f:c0:64:dd:66:45:59:09:a9:c2:d1:33:76:
8d:0e:0a:80:9a:52:ad:ce:e1:32:58:83:7d:4d:29:72:45:12:
0e:80:dc:08:6a:1c:f0:62:ec:be:77:34:97:87:fa:a3:91:a7:
b1:9e:e1:63:6f:5c:7a:79:07:59:32:9a:e6:1b:3e:88:b0:ad:
1a:68:4e:0c:62:3f:1b:d3:ec:ba:33:78:76:e6:f6:42:4d:c4:
d2:3f:0b:f5:0e:ab:86:cb:85:75:65:bf:d9:d5:99:77:33:ba:
9f:7f:5d:9c:82:1d:00:54:81:13:3b:0b:01:1f:c0:9b:1f:43:
3f:49:c2:b0:72:3f:3b:36:1e:f0:85:00:c5:ae:04:35:89:6b:
c9:b2:f1:d1:72:af:35:f7:4f:5d:13:44:1b:40:53:72:ce:33:
2a:3a:0d:d0:c2:ab:c5:c1:6d:d7:ff:c0:a4:d5:e8:48:b5:8b:
3e:0f:08:6e:cc:3a:0a:69:f4:fa:2f:a5:f4:ba:c9:e5:4f:3d:
8e:58:7a:00:52:dc:22:96:ae:c1:49:44:97:3b:27:b4:e7:18:
13:42:76:e7:1d:be:9f:62:c1:c5:f9:cc:f3:f1:4d:43:37:55:
06:5a:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:59 2025 by rpki-client