Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: Z1Pps5FzBRKeP86xgRwAgoPQWTYvOKWQysh48btmkXI=
Subject key identifier: 96:C5:C7:9D:5D:9C:9F:2A:16:15:75:56:B4:94:5B:AA:40:69:BD:70
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 01976929D19AB0B56D70FA3C7CFAFEF6206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0D53
Signing time: Fri 13 Jun 2025 12:00:37 +0000
Manifest this update: Fri 13 Jun 2025 12:00:37 +0000
Manifest next update: Sat 14 Jun 2025 12:00:37 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: BRZHX4K7WwUP3+f6gjy2psGfd590c+bYU+FmzEUFDgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d1:9a:b0:b5:6d:70:fa:3c:7c:fa:fe:f6:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jun 13 12:00:37 2025 GMT
Not After : Jun 14 12:00:37 2025 GMT
Subject: CN=96c5c79d5d9c9f2a16157556b4945baa4069bd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:d2:0d:01:f7:04:5c:68:2c:6f:2a:03:44:
f3:a3:ed:fa:61:89:bd:8f:08:43:90:48:7d:55:f4:
2e:35:aa:9b:0a:53:55:f5:2c:9e:9d:89:f5:9e:e0:
01:7e:45:f2:9e:c5:f8:99:6c:e4:83:00:ed:1f:fc:
2a:47:54:4f:bf:de:d0:98:51:3d:8e:d8:56:19:b8:
66:c5:5c:c1:2a:5c:ce:a6:42:f6:6f:e4:a1:d8:75:
a9:2a:ef:5f:f3:e3:ee:c0:03:93:ef:d7:c5:05:d3:
2d:c8:07:be:fc:ae:11:89:93:70:6f:66:27:59:07:
f0:8d:e3:a3:fa:97:8d:c2:0c:01:7b:9a:02:b2:07:
9e:cf:b0:81:54:ef:70:a6:2d:51:65:71:78:1d:8f:
51:f7:fe:a6:2d:91:26:1e:be:1e:2a:98:3e:6f:af:
d6:5b:fd:01:66:7d:05:1d:59:92:20:b4:e3:64:d4:
1f:02:ed:c3:7a:ca:42:2b:66:eb:ca:d0:d4:91:08:
fb:77:f3:03:1b:24:b1:f4:6b:97:ae:f1:3a:98:79:
56:ed:0b:55:41:b7:e1:b4:c5:25:c7:50:42:40:91:
52:63:42:2f:64:ac:84:ec:51:d8:30:bb:5a:12:cb:
a6:4d:f4:07:54:bc:d8:8f:e7:23:b4:39:7d:5c:3a:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:C7:9D:5D:9C:9F:2A:16:15:75:56:B4:94:5B:AA:40:69:BD:70
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:be:aa:4d:f0:8b:04:35:35:54:df:6b:d8:2a:17:cc:1b:
0d:7e:97:95:20:09:5c:b5:85:81:ed:81:1e:59:d7:ca:87:f3:
77:2f:2c:14:6a:fa:b4:8c:15:69:07:fa:28:68:a7:8e:ec:51:
d0:a3:2c:a7:81:b6:c7:9b:3b:e3:67:e5:43:c1:4e:6d:3c:0d:
ef:c2:b7:d2:a3:b2:45:73:70:a7:2b:ba:ba:42:10:01:a8:4d:
bf:63:e3:26:bc:cf:67:c2:c5:78:b8:56:c2:94:f4:61:f2:3c:
0b:a3:e7:d9:c2:1c:5d:e2:f0:38:d6:23:1a:98:17:d3:39:6e:
41:c9:a1:33:38:22:89:bd:de:19:0e:09:50:c3:c7:b2:3f:db:
d3:66:26:68:10:4a:7b:45:60:fb:3d:fb:ee:3b:fb:ed:af:8d:
92:86:44:a7:5f:f8:ad:dc:2f:70:4f:91:f7:e7:08:57:e5:52:
99:40:cd:51:54:b9:3e:de:18:9f:02:97:7c:94:51:3e:7d:26:
5b:4c:db:24:d9:6e:5e:45:b9:dc:10:58:d9:79:e4:68:b5:a3:
a9:b3:ea:b1:5b:2e:51:f1:cd:f2:cb:1d:2a:ac:7c:0d:43:dc:
83:1f:fb:32:59:5a:31:e8:05:c5:70:3b:06:13:96:61:5d:17:
ef:d6:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:06:36 2025 by rpki-client