Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: IZwOWOZ3+zCczeEIRKbhrEBHJ9/REAGhuccNY8LP54Y=
Subject key identifier: 95:21:4A:7C:CC:8C:FB:0D:B4:6C:D0:DC:52:D5:5D:D8:FA:39:28:6F
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 01974779D9C577B162D4CD055CA7B5EF9E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 0EA9
Signing time: Fri 06 Jun 2025 23:00:57 +0000
Manifest this update: Fri 06 Jun 2025 23:00:57 +0000
Manifest next update: Sat 07 Jun 2025 23:00:57 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: PwLAUgMo3Uaat4yKioM3noFQxHXOZzNBmAQE7AOWq6I=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d9:c5:77:b1:62:d4:cd:05:5c:a7:b5:ef:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Jun 6 23:00:57 2025 GMT
Not After : Jun 7 23:00:57 2025 GMT
Subject: CN=95214a7ccc8cfb0db46cd0dc52d55dd8fa39286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:9a:5a:20:ad:d6:ce:19:2e:83:64:15:df:
36:87:86:eb:5e:31:ee:47:43:86:19:b2:6c:36:20:
73:81:aa:05:8b:4f:8b:e2:f7:5f:c3:d3:d7:31:34:
e8:52:8c:2d:e2:f3:87:42:c4:81:5e:f0:36:56:60:
56:e5:5e:04:16:a2:25:a4:97:b1:60:6d:bf:d3:d8:
d7:57:26:b9:a1:99:11:2d:3d:d4:22:d8:7a:6e:62:
3f:97:07:c3:20:a0:d9:bf:57:3c:c9:9e:8d:f9:a0:
ab:1e:6c:7b:31:6c:0b:32:15:42:f8:dc:47:cd:6c:
91:14:cd:a0:f5:4c:cb:30:ea:ef:dd:6e:fc:68:6b:
48:ea:d8:e5:cb:4e:3f:c9:a9:44:09:45:9a:be:88:
cf:2e:b6:f0:75:d8:1e:34:c6:7d:f2:9e:53:a6:5d:
53:8e:5f:9a:51:58:3f:2c:bf:1a:24:f6:27:37:09:
6c:44:1c:5e:b0:63:c9:42:d8:53:9d:18:13:8a:61:
10:76:01:ab:e8:1b:61:4b:77:37:44:d6:60:10:d2:
30:71:b0:94:eb:09:44:32:72:04:62:46:5e:48:dd:
f6:b0:1f:cb:a2:58:52:7a:a7:79:e6:24:4f:04:a6:
fa:98:a5:5d:54:e9:65:7f:4f:88:f5:1e:35:cd:89:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:4A:7C:CC:8C:FB:0D:B4:6C:D0:DC:52:D5:5D:D8:FA:39:28:6F
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:db:36:be:ad:d8:c4:5b:ce:64:7a:72:b6:f1:df:3a:d5:99:
b5:89:72:3d:16:f5:87:5e:db:86:7b:5d:d9:3c:7a:fc:e8:4c:
1c:76:56:7f:cc:30:38:8a:b3:54:16:a4:dc:ae:ba:c0:6b:d3:
01:a5:e4:fc:df:f0:47:c6:4e:d9:b8:a6:a1:3e:f2:0c:85:5b:
d5:d4:43:d2:62:d9:91:87:bb:da:d2:8f:7f:35:95:74:0f:cd:
7f:55:33:dd:f5:14:61:93:84:34:d1:1f:fb:a5:df:78:85:8b:
b9:bf:2e:9e:e7:d7:78:ac:73:5f:63:ca:f6:27:c4:05:18:bd:
33:35:1c:f4:76:8d:8f:f1:c3:97:a9:f6:40:4b:e0:cc:74:9f:
24:f2:2c:36:d5:8d:83:16:3e:14:cb:3d:3c:27:a0:35:6b:9b:
13:ea:f8:a7:5a:57:66:4e:b5:7e:2c:cf:01:84:02:40:5a:a2:
19:cb:9a:be:05:7e:a4:e3:3c:07:37:8c:7d:47:23:e1:a7:38:
44:47:30:26:4d:76:9b:b4:e9:69:fc:d8:15:81:f5:aa:1a:74:
c4:9a:1c:c3:8f:3e:1d:f1:e0:af:4e:44:b1:14:69:5c:88:27:
a0:28:6e:ae:06:53:c2:1b:81:4a:2a:dd:49:c5:be:f6:c3:95:
92:20:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:21 2025 by rpki-client