Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: oDFAIEOCmNDfB8bdHpsLm0CJfZLDKlLs5Z4wiYXgYlc=
Subject key identifier: C6:0E:89:1C:64:72:09:49:F3:3A:57:09:90:3A:57:B6:EE:38:E4:71
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01974AB1794C88D57ED0EAC8DAF7D05A3825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1140
Signing time: Sat 07 Jun 2025 14:00:34 +0000
Manifest this update: Sat 07 Jun 2025 14:00:34 +0000
Manifest next update: Sun 08 Jun 2025 14:00:34 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: pAD/+aaN3GZyBr8NpgHeQm9WtJxnkZuAQLh+CVlgLwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:79:4c:88:d5:7e:d0:ea:c8:da:f7:d0:5a:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jun 7 14:00:34 2025 GMT
Not After : Jun 8 14:00:34 2025 GMT
Subject: CN=c60e891c64720949f33a5709903a57b6ee38e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:1d:f5:97:b4:50:33:d6:b1:c3:42:59:06:
9b:29:65:b3:40:2c:db:ec:b3:55:3e:e2:a6:85:c8:
7a:26:25:c2:9c:d5:17:41:4d:60:b2:6d:b0:91:f6:
5f:2b:b4:d1:70:a1:9e:32:15:30:13:74:5a:96:94:
e0:70:3c:b1:81:bf:40:a7:11:8f:06:c1:26:82:75:
e0:29:f8:20:67:f3:d4:dd:3d:70:83:39:ed:06:f8:
98:2d:83:a6:e9:bf:e2:5d:c5:d2:a5:19:bc:dd:b8:
f9:ef:86:34:c5:02:af:01:6f:ff:93:54:b5:0d:31:
53:b0:be:fa:48:a8:49:49:86:c7:d5:8e:8f:c6:40:
5a:43:9c:0e:12:34:b0:72:ac:b9:cc:bd:52:f2:67:
32:14:c7:b4:8e:c9:c1:47:42:7c:45:f8:ed:87:f1:
77:01:40:dc:79:38:c3:68:9b:5f:52:4e:5e:8e:e6:
16:2f:e8:31:c6:0d:88:17:14:03:8b:d8:02:4b:d4:
ac:13:e2:b8:0a:6b:e5:c3:b7:5f:cb:20:98:7b:e0:
5d:57:1c:dd:69:83:88:15:88:16:fe:f9:da:f2:af:
b3:68:5b:17:49:2a:d6:af:d9:b0:97:9d:94:0a:a9:
93:25:32:74:30:f1:89:52:3b:3c:00:0d:ca:8f:d4:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:89:1C:64:72:09:49:F3:3A:57:09:90:3A:57:B6:EE:38:E4:71
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:21:2c:88:c6:75:3f:77:bf:7e:e2:a4:42:07:f7:d8:9a:
57:99:8e:c5:d6:6a:ee:cb:9e:1c:ed:44:f5:b4:3c:63:22:93:
5b:88:23:62:80:89:f0:e7:37:24:79:7c:4e:32:ca:72:1e:73:
8f:aa:68:24:70:56:78:89:eb:5a:6d:77:9f:65:71:66:a4:cb:
f1:7c:4d:50:18:d6:ca:ab:4a:12:f5:09:76:f5:57:e9:77:9b:
58:64:18:00:b7:e6:2f:ac:c6:ff:0b:38:55:76:2e:3b:89:c9:
ec:1b:d3:eb:6c:52:ad:68:b5:d1:9d:80:e1:30:a8:b0:52:5f:
85:c2:c6:04:95:c1:b6:e8:cb:cc:08:26:83:c2:da:58:17:a1:
c4:18:e9:7a:12:4b:9b:2b:06:f7:5b:4f:dc:d7:e2:f6:2e:50:
a7:b1:8f:11:ec:6b:9c:f6:00:a6:03:8b:05:56:c2:b5:b8:43:
13:02:57:49:3b:7c:2d:aa:1e:f5:79:64:7b:4a:f0:17:57:ee:
10:db:37:c0:1e:d8:fa:05:26:2a:59:dc:8e:52:9c:6f:e6:70:
b3:1d:df:0d:ba:9b:27:34:18:2d:43:9c:36:0f:8e:6f:4b:be:
da:d0:74:49:a2:89:21:60:a3:eb:81:f2:d9:11:ae:b4:00:bb:
2a:1f:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:41 2025 by rpki-client