Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier: fZh2aLCG1HdnFG5wUWG/i2cpae8/2Wj1urSn0vvmBAM=
Subject key identifier: 28:F5:3A:82:43:B1:1E:D9:AC:6B:FE:6E:CE:DD:5A:CE:76:15:A3:05
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019758A432D36DB7EBC6905AF260D3A8DB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number: 0159
Signing time: Tue 10 Jun 2025 07:00:45 +0000
Manifest this update: Tue 10 Jun 2025 07:00:45 +0000
Manifest next update: Wed 11 Jun 2025 07:00:45 +0000
Files and hashes: 1: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
2: C4Up61Dgu__WghpkGF8FKpQY398.roa (hash: b8S8SJqeFu8XgJiMJ0Lra7MgR4ZTRQMgjWTkGpevN2k=)
3: W_QbYX9ZTefRSwKnL72ps23YkbU.roa (hash: O+yO4y0kWUxUwS+WjWuH503NMuQYxW5RzvY5stzKpfg=)
4: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
5: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
6: ikaCSqXI6xfl5qVDi3yr58aTFuA.roa (hash: N8S/41ybeOjv/UdOqBCbTzj0r4lou4Hpt/IYlvQhpik=)
7: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: /MohV7hLPp5Y8C76av5RjCMY76o5Aoq/tM0NR3Vulig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:32:d3:6d:b7:eb:c6:90:5a:f2:60:d3:a8:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 10 07:00:45 2025 GMT
Not After : Jun 11 07:00:45 2025 GMT
Subject: CN=28f53a8243b11ed9ac6bfe6ecedd5ace7615a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:1e:73:b6:91:4a:8a:0b:83:5f:40:6b:1a:
4b:8e:ae:33:c2:f4:cc:fa:5b:40:40:55:51:3a:00:
f9:bb:11:13:6e:6c:99:26:e0:9c:91:07:2b:02:e5:
8d:2d:ff:2c:23:93:79:40:09:5e:86:1c:3c:59:e0:
c7:6a:9e:a3:1b:09:bc:0d:69:71:b5:e0:84:f6:dc:
97:13:40:ce:9e:a8:fb:54:06:ca:fb:1a:be:bc:f6:
89:5c:46:52:77:47:ca:22:95:be:04:60:31:9a:53:
f0:0e:31:ef:3a:47:44:88:95:f2:39:ba:6c:54:46:
88:23:95:7f:13:17:48:de:2a:99:4c:46:a6:9b:16:
ac:10:2f:8a:d1:5b:2d:6b:01:39:75:9f:d0:c9:96:
d8:cf:c3:54:5f:49:39:b2:a2:a9:29:e4:13:f1:ee:
c2:29:4b:eb:3b:d2:df:29:4f:15:78:c5:09:5c:03:
ef:35:c3:3a:24:47:c8:36:51:fb:e1:96:63:42:65:
60:66:52:cf:f8:69:b7:c1:33:91:f2:4f:72:cb:0b:
ff:80:9c:ab:30:61:84:d0:8d:90:80:66:e1:83:53:
2c:7a:dc:99:d9:13:59:51:33:75:9d:bf:6f:4c:14:
79:fe:18:fe:12:0f:fc:47:ae:a5:fb:3e:64:9b:4e:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:3A:82:43:B1:1E:D9:AC:6B:FE:6E:CE:DD:5A:CE:76:15:A3:05
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1a:4c:74:87:e8:c7:3a:88:65:2f:27:bb:d6:14:a9:3f:c9:
4f:bb:19:21:58:8f:e7:93:5a:54:e0:57:c1:9b:b7:ed:98:57:
b5:8c:c0:5c:33:65:39:b4:c6:83:86:38:b9:5e:51:84:6b:7f:
90:a6:09:8d:cb:5d:01:1a:8e:f5:c0:a5:97:0e:89:fc:dc:34:
11:48:a1:76:6a:18:64:86:c1:27:1c:7d:86:b1:7e:1b:bf:28:
ef:01:d5:eb:1e:b3:44:d6:97:cc:5f:57:db:27:c9:8f:dd:cc:
ee:80:51:64:90:a8:49:23:df:29:dd:ba:25:71:1a:8a:e3:93:
1e:fe:c8:2c:03:5e:ba:7f:3d:3a:5a:ba:2f:18:7d:09:b0:6e:
02:b4:d1:2e:df:2b:4b:21:33:08:d9:74:d4:98:50:a8:65:df:
9c:27:7c:61:3f:28:f5:f9:7d:79:91:4e:2c:bc:74:ac:51:a8:
d2:7c:fb:ea:00:9f:3d:b7:c6:29:35:dc:86:ef:84:f2:87:ca:
e4:6f:3e:70:08:bf:d4:8f:bb:3f:3f:67:35:5a:05:87:0e:46:
b8:b2:5e:1a:67:33:9f:e6:6b:48:8b:a2:42:4d:60:df:4d:ed:
a7:f1:2e:f5:fa:2f:88:d0:e7:00:c1:eb:22:c1:ef:a7:c1:c9:
2f:ff:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:53:49 2025 by rpki-client