Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: FJ65TbfAS3BZjYrQj8cfNWeGSwARWMtQPLXvh+uiv/o=
Subject key identifier: F3:0C:7C:69:83:96:DA:C5:10:6A:95:0B:6D:38:9F:E1:19:DC:E0:0B
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 019748C2E23D1BA38D86DBC807BD2B7FE2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 0807
Signing time: Sat 07 Jun 2025 05:00:20 +0000
Manifest this update: Sat 07 Jun 2025 05:00:20 +0000
Manifest next update: Sun 08 Jun 2025 05:00:20 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: H0fzWmyZiIPKalmdpZLgUPReeKhnjGf37C9GltK7uN8=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:e2:3d:1b:a3:8d:86:db:c8:07:bd:2b:7f:e2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Jun 7 05:00:20 2025 GMT
Not After : Jun 8 05:00:20 2025 GMT
Subject: CN=f30c7c698396dac5106a950b6d389fe119dce00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:63:d9:93:06:ee:ed:1f:b7:d2:85:d9:00:
16:ed:67:ab:c7:04:a7:29:07:23:4c:ee:cf:c2:80:
27:4d:b3:99:d4:88:ef:51:a7:c7:43:6e:45:93:1c:
e6:af:c6:85:d4:b8:5b:20:6f:da:0d:39:db:b7:70:
80:c1:17:af:b3:ba:d1:90:f7:ab:0e:3a:af:d2:c9:
68:29:4b:d2:51:2f:91:6a:5e:0e:ea:26:69:d2:7f:
11:44:1d:ec:07:ee:b0:38:02:e7:c8:de:9c:db:e4:
ac:d1:5f:a3:02:d1:9a:ca:05:52:d9:bc:fc:05:45:
03:18:f4:bd:ea:a1:43:7e:5d:2f:b0:a4:8f:45:9a:
cd:13:16:d1:64:7d:c2:b9:0f:9e:8e:43:26:e8:ae:
a6:83:2b:4c:39:62:d4:71:16:09:ab:b3:54:13:70:
2b:d7:62:31:d8:db:55:b0:01:56:21:be:62:1f:c1:
e6:92:e9:36:12:e1:de:f3:00:7f:8a:96:c2:3b:64:
fb:41:fa:4c:12:ca:66:69:53:21:02:7d:e6:64:7b:
cf:8f:c9:39:bd:12:a7:fd:8e:32:98:3d:02:e4:34:
9b:c1:e2:68:7a:64:e0:b0:ed:d0:34:8c:0a:50:b5:
87:c0:43:14:3e:50:90:06:5f:5e:33:66:d6:96:9e:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0C:7C:69:83:96:DA:C5:10:6A:95:0B:6D:38:9F:E1:19:DC:E0:0B
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:5c:fe:e2:d4:31:11:74:66:94:a0:ac:5a:91:3f:96:43:
a6:5c:33:82:c7:87:b6:c2:d2:2e:93:dc:d1:bb:55:f9:04:99:
ad:fc:f0:6d:2e:08:52:8d:d3:b2:29:dd:cc:fc:3f:a3:11:4b:
b8:f8:8d:b0:d2:32:31:09:e4:94:f3:c1:0e:ce:21:c3:78:19:
83:82:ac:d0:1c:15:77:5b:dc:2f:4a:91:b9:aa:18:6a:96:72:
c0:d2:fa:d0:29:a3:d9:66:fb:e0:1d:27:2a:dd:68:10:39:f3:
42:0d:51:3c:8b:97:44:bd:65:fd:1a:30:74:6b:a6:a5:c7:39:
f9:3a:06:18:13:48:dd:68:1d:b5:fa:cb:1c:2d:41:0c:90:d9:
20:91:c9:eb:3e:ac:b0:11:0e:6d:c3:27:2a:8b:bf:df:cb:c6:
a2:38:fd:f4:f8:f5:7b:2b:ec:05:25:a1:18:05:68:42:49:9c:
43:ea:1e:a7:bb:18:10:f7:38:aa:4f:63:7b:08:d2:8a:16:4e:
a4:85:60:14:58:2a:16:8e:0b:77:4a:dc:e5:22:3e:ef:b7:99:
59:b4:d9:b7:ee:0a:d3:70:63:41:97:39:6e:16:9c:49:bc:7d:
ca:36:bd:f5:96:3d:f4:f7:d3:0e:e7:22:c6:c0:35:93:25:fd:
97:97:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:48 2025 by rpki-client