Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: IjAgOi6q0syxv9B2DRbtHdLDMzxtoQtPjcUrIbE8AEE=
Subject key identifier: 47:37:3C:45:27:5B:49:E3:33:56:3F:3E:9B:9C:7A:02:6D:52:37:4F
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 01974BFB60767BAC70D7ED35AC929E5F3909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 12C9
Signing time: Sat 07 Jun 2025 20:00:54 +0000
Manifest this update: Sat 07 Jun 2025 20:00:54 +0000
Manifest next update: Sun 08 Jun 2025 20:00:54 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: hsrHQwibwcO+jt4Qm8GkBVwohhhd7g/n1ItXues2HbY=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:60:76:7b:ac:70:d7:ed:35:ac:92:9e:5f:39:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jun 7 20:00:54 2025 GMT
Not After : Jun 8 20:00:54 2025 GMT
Subject: CN=47373c45275b49e333563f3e9b9c7a026d52374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:09:cb:ac:17:6b:85:d9:3c:5f:29:06:29:
9c:fa:13:14:f1:cf:c8:96:ad:4c:f0:70:80:2f:89:
01:c1:69:ec:38:db:ee:45:be:ac:48:c5:41:bf:c8:
7b:fd:da:a4:74:f1:bf:fc:6f:9a:fd:e9:54:b3:4b:
05:0f:13:a5:08:4e:01:b2:ab:52:e4:f7:75:df:29:
bf:c6:5e:86:80:ff:a7:89:de:e4:a7:3e:b0:07:fe:
43:58:30:db:20:7c:42:6d:c9:2d:24:05:a7:b0:76:
bf:be:a4:56:96:f3:c2:25:38:b5:ac:53:31:7c:39:
99:38:42:4d:27:c8:c3:e8:46:54:7e:1c:f6:c0:0c:
d8:35:86:45:62:d8:64:04:7e:60:f2:02:6e:55:66:
b4:b9:bb:87:fa:ac:ff:1d:da:f6:8f:84:1f:dc:5f:
cf:e9:6f:b5:58:f4:30:d3:e7:73:41:c7:d4:54:03:
b5:ea:2c:43:2f:10:45:19:53:c5:97:84:af:22:e2:
ca:7b:35:58:0a:f5:a0:05:b8:b0:50:00:85:c0:55:
a5:86:22:a5:3a:c8:17:7e:28:a0:31:8f:27:ad:9b:
70:c5:e5:9a:81:87:9a:86:2e:45:d9:59:c6:d1:f3:
6a:b2:a5:8c:b2:72:b5:bf:fa:3f:43:52:28:07:8f:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:3C:45:27:5B:49:E3:33:56:3F:3E:9B:9C:7A:02:6D:52:37:4F
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5c:bb:37:52:b8:a7:cd:ce:2f:6c:dc:2e:9d:7e:b5:30:3a:
d4:93:ca:b3:ac:fa:81:de:8a:f4:05:10:96:e3:cf:44:63:61:
90:d4:93:fe:96:80:86:77:c9:a0:a1:e7:5d:74:41:89:ba:e4:
e6:1e:7c:23:88:1c:0a:d3:52:82:83:42:19:ed:c5:44:54:b3:
a0:93:65:67:a6:a0:6e:0c:72:12:63:0f:5d:b5:cc:e2:c8:e0:
9c:a2:5c:86:f7:89:17:ca:e7:3e:b6:6f:27:e9:7c:89:87:61:
bb:7c:44:02:20:de:20:c4:9b:d2:61:8a:5a:23:bb:ab:83:26:
bc:c7:5f:2c:e5:6c:8e:62:6e:99:15:97:25:8e:3a:45:50:6e:
e6:68:8c:c7:02:b4:53:64:15:24:07:14:5d:c0:3d:68:23:b2:
9a:21:1c:2e:36:e3:4c:1e:b7:83:98:98:c0:6e:bb:60:35:0a:
fe:87:02:8c:2b:b4:b6:1f:6d:5c:b8:7e:1c:81:fe:9d:47:db:
81:12:3f:07:25:f0:1b:fb:82:1e:93:bf:89:5a:4e:ec:e3:8c:
3f:19:e7:5c:1c:55:64:e0:52:9a:48:89:ca:56:a7:5e:da:b2:
d4:50:0b:3d:42:79:7a:94:cf:9e:70:24:27:ea:76:4d:b2:d6:
2f:2a:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:45:07 2025 by rpki-client