Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: Am2Teg2aTxQHB3rP/Gxnkqpwv/gIcQGXgepNVVPsu1w=
Subject key identifier: F2:82:74:B0:67:63:FD:B8:B5:D5:D6:18:E8:A8:CB:F1:41:99:74:1B
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 01974BC41449FD013B72906DAB650A01E556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0DDF
Signing time: Sat 07 Jun 2025 19:00:30 +0000
Manifest this update: Sat 07 Jun 2025 19:00:30 +0000
Manifest next update: Sun 08 Jun 2025 19:00:30 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: QG0wnf7w2hnMvR98CAqdZUT88A/ACqwtrMCVuui1Bc8=)
2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:14:49:fd:01:3b:72:90:6d:ab:65:0a:01:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jun 7 19:00:30 2025 GMT
Not After : Jun 8 19:00:30 2025 GMT
Subject: CN=f28274b06763fdb8b5d5d618e8a8cbf14199741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:5d:0e:90:bf:38:1c:c2:d5:ab:75:ef:d3:
2d:b8:06:d0:cb:0b:46:93:a6:ec:ba:3c:c4:1a:96:
0a:a3:ab:85:83:dd:8c:60:2e:17:87:97:b2:0b:5b:
3a:82:ed:fe:0d:e5:f1:33:8f:14:58:9e:62:f3:23:
6c:e0:29:f2:e8:7e:51:5c:8c:c4:5a:54:44:6a:b5:
8b:e1:d3:86:57:40:28:8b:8d:3b:b2:ee:db:4d:a9:
9b:db:e7:66:52:84:2e:59:70:93:95:56:2c:50:51:
56:eb:a0:67:bd:6c:8e:b9:07:89:99:5f:e8:6a:bc:
de:78:7d:ef:07:2c:28:d9:23:48:bf:21:a3:e5:03:
4e:57:b2:03:1d:8a:6d:20:76:5d:ec:9b:3e:8f:90:
03:dc:e0:02:83:d3:24:d6:ee:63:9a:36:73:47:c2:
4b:d2:89:ff:31:0a:26:19:47:95:63:c2:14:98:ab:
ae:64:7a:d0:ae:2f:b2:bc:92:bf:f3:2e:5e:e0:e4:
99:08:f6:00:dc:03:4e:42:ab:2d:0a:aa:38:40:28:
69:36:7d:e2:0e:bd:c2:c0:92:4b:05:1b:33:28:f4:
b5:d2:90:e1:f4:c3:ec:b6:25:a0:fb:e6:10:5e:31:
56:f6:2f:ca:3c:c4:0e:b0:45:49:2c:b1:1e:71:09:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:74:B0:67:63:FD:B8:B5:D5:D6:18:E8:A8:CB:F1:41:99:74:1B
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:04:23:e1:87:27:04:0c:17:43:b3:03:00:e3:7b:87:a1:71:
15:97:87:dd:b7:a4:4f:77:e5:b5:55:1e:a6:f4:c1:b9:6b:5c:
12:52:0f:31:22:e1:ad:dd:40:27:96:54:6d:43:85:1d:6d:d4:
7f:6e:7b:59:06:f3:72:a1:cb:4f:91:43:63:1a:12:58:f8:dc:
fb:54:8e:06:f5:de:b9:64:4d:1b:cb:88:f7:e1:f4:ba:fb:b2:
04:da:a1:8c:27:a2:a4:5f:b7:7d:a0:9c:da:8d:33:ef:05:21:
1a:95:a7:07:26:6b:53:96:bd:77:52:a8:6d:5f:fb:60:0c:a1:
b0:ef:cb:b3:0f:a5:04:67:c3:8a:8e:1e:5e:4d:d9:8d:d7:9b:
7d:ce:a8:05:0c:d5:92:51:23:c2:91:eb:a0:1b:b6:f9:47:53:
6b:2d:76:cb:d1:de:4e:a0:df:90:d3:fb:94:3a:bf:12:c9:fa:
ec:e8:42:95:71:a5:c5:e7:e7:01:04:ef:70:24:fd:4d:96:74:
8c:5c:c7:0f:fd:35:46:43:79:45:76:35:00:7c:96:74:1e:e9:
45:dc:d8:0b:25:84:4a:58:a0:7f:02:8e:7c:85:9e:c2:ee:00:
7e:65:79:b7:ce:59:f5:f4:9b:87:32:9d:d5:8d:f1:70:b4:f1:
b5:55:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:49 2025 by rpki-client