Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: 1EEhoKvkBr5Fk5kwxh2OSUnPdkYLRIU5It1HyaCEgqM=
Subject key identifier: EF:93:28:E2:CC:39:C9:2E:2A:0B:AC:C8:70:7F:B8:E3:EB:4F:47:26
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01974B8DCD168DC8E240FD69371BC7CCF577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 18:01:13 +0000
Manifest this update: Sat 07 Jun 2025 18:01:13 +0000
Manifest next update: Sun 08 Jun 2025 18:01:13 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: At/rxTZUrXQlOEtghWg7X9olZMu71DF4A9dNqLTEy8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:cd:16:8d:c8:e2:40:fd:69:37:1b:c7:cc:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jun 7 18:01:13 2025 GMT
Not After : Jun 8 18:01:13 2025 GMT
Subject: CN=ef9328e2cc39c92e2a0bacc8707fb8e3eb4f4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:84:79:97:15:bf:73:a5:2a:19:12:86:0b:
f0:92:e7:27:8b:28:ac:e3:5d:90:5c:64:1c:64:ac:
c5:99:35:ba:c8:28:a5:47:ac:cb:0c:11:0a:2f:3d:
68:6c:a7:99:de:94:e1:12:f7:7e:b3:41:c3:0c:7c:
de:38:69:29:83:fb:eb:ec:15:85:30:dd:cd:0c:25:
78:28:e5:d7:6b:64:36:34:9e:53:88:a4:26:ba:8a:
7e:67:af:9f:97:5e:96:fa:51:93:e3:95:7b:1e:82:
1e:7f:42:52:6d:5d:c8:1d:cd:c9:e4:66:ed:81:17:
f0:43:7e:9d:53:2d:8c:85:64:89:28:cd:74:cc:5c:
dd:b1:52:e6:7e:c5:0c:6b:55:9c:6a:84:5b:5d:a8:
8b:7f:c7:19:45:9a:af:a4:0d:cc:c7:b9:e3:40:fb:
ec:36:d4:a3:55:5f:29:37:f5:09:9a:85:13:8a:f5:
4f:e7:75:bc:0c:5f:12:6b:f7:aa:9f:6e:60:17:91:
6c:fc:7a:ba:56:d5:c8:9a:52:19:26:86:93:23:3c:
41:37:7a:bc:7f:05:fb:86:d0:cd:bb:15:cf:41:54:
7c:32:e5:1b:a3:a3:de:d4:66:f5:aa:ba:f0:0b:ed:
7b:e5:1f:da:a4:23:31:f6:62:25:ac:48:05:34:01:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:28:E2:CC:39:C9:2E:2A:0B:AC:C8:70:7F:B8:E3:EB:4F:47:26
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:b8:43:4d:67:d9:a6:8b:ab:66:4c:f3:22:17:92:7f:0f:
b3:9b:c5:a5:7a:03:78:87:4f:79:8a:9c:0c:b7:77:a1:14:04:
bd:a7:5e:0d:78:7b:85:53:79:64:b3:ff:30:50:40:2e:32:87:
b0:1e:61:8b:59:be:70:c5:80:4c:54:4f:a3:26:50:6f:e7:e1:
7a:74:69:61:ba:8f:2a:38:fb:13:a8:fa:89:89:c3:60:2e:d5:
54:39:99:03:b4:e2:91:c9:00:ff:52:66:65:9a:74:9f:ad:c8:
94:6b:fd:66:4c:e1:33:61:b9:d7:74:52:62:f4:7a:f1:9b:65:
b7:c8:1a:fd:e2:4f:55:aa:1a:c2:9e:12:4f:21:fc:09:49:39:
67:1b:30:49:60:80:62:7b:fb:78:c1:5a:bf:38:a9:bd:1f:87:
11:89:3a:54:83:c9:e6:53:7e:4e:17:da:c6:f6:e5:b1:21:eb:
76:89:f3:3d:10:48:2c:a2:0c:e8:4f:ee:43:11:b2:df:4e:f5:
65:e2:b2:23:69:37:7f:43:61:d7:c1:28:d9:5f:75:fc:f8:22:
27:4d:7a:92:b4:c7:58:9c:f0:ce:70:3b:db:f7:1e:6c:52:c7:
b0:33:0a:43:4f:0a:81:26:66:17:48:25:7e:74:11:e2:ff:7f:
e3:8e:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:31 2025 by rpki-client