Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: JE4FY4HErZ6Hlm39bdIVh95QODqwiWPyeqx+tezzneM=
Subject key identifier: A9:C9:1E:9C:FE:55:56:92:B4:FD:07:42:FF:FE:2B:7A:9D:5F:59:97
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019749318C2FBC343CE9896C2183AA3AD358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0896
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: zHj06WqvsX2joNELM6N+hdpSfC0XoPU40F7xjTGQUE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8c:2f:bc:34:3c:e9:89:6c:21:83:aa:3a:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=a9c91e9cfe555692b4fd0742fffe2b7a9d5f5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:51:ba:e6:ff:eb:8e:3f:99:9d:95:f4:e1:
1f:a3:79:50:d3:52:49:99:91:b7:35:3a:b3:df:bf:
c2:35:e6:cd:95:4c:6a:58:b2:4b:2f:de:2e:b6:ae:
2b:73:46:1b:27:ce:2e:88:57:55:8f:02:7b:7e:c5:
a7:50:fc:97:bc:00:f5:88:f7:2e:14:2c:a9:74:fc:
de:08:93:47:56:8a:0f:88:ce:d9:24:09:cd:f7:2e:
50:ba:63:c4:c7:dc:93:08:7b:53:7e:08:d9:95:53:
c8:0e:54:f9:3d:5b:58:95:8c:6c:f1:d9:c8:79:d5:
d1:50:77:b6:97:18:21:4c:1a:ff:6b:88:17:9a:97:
bf:d1:6c:7d:e2:9d:3b:ed:cd:4f:47:40:ac:35:92:
31:14:10:c8:f6:1d:b6:a3:d5:ba:b3:ea:cb:2a:19:
81:23:6c:88:56:34:c7:b0:04:c9:7c:56:9b:6f:a8:
2c:41:d0:fe:a2:b8:d5:77:3c:06:28:05:a3:28:42:
cb:12:66:27:d6:bf:4d:f9:89:22:1c:68:8a:ba:9e:
75:01:a5:65:06:a2:1f:08:e9:1c:b6:ff:57:ff:fd:
b1:92:be:c9:d5:68:de:1b:d7:cb:37:74:b9:fe:96:
b6:36:8b:15:5a:fc:0f:ec:16:78:d7:99:d4:44:43:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:1E:9C:FE:55:56:92:B4:FD:07:42:FF:FE:2B:7A:9D:5F:59:97
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:13:bb:6d:2d:e7:01:b6:1c:38:35:e3:0b:8a:33:4a:78:
03:f7:0b:81:3b:2b:be:db:ed:e7:38:01:35:3a:ed:82:98:20:
54:df:2b:eb:8b:cd:dc:4d:60:77:94:0d:2c:4a:91:3e:25:2d:
a6:10:48:a8:10:16:91:06:99:0e:c2:e1:cf:14:a5:c6:70:22:
2b:79:05:d8:02:08:24:6d:12:72:6b:64:fb:e7:0f:67:0d:f8:
ab:d7:51:cb:c8:92:14:67:16:4f:fd:1b:6c:5d:82:85:6a:5f:
1f:a2:0c:2a:3f:e7:9d:db:54:d0:a7:9d:de:f1:52:8e:f6:75:
c4:c7:04:99:54:43:4c:fe:83:6d:3b:25:68:ef:e1:39:53:ea:
1d:7f:67:e2:8c:10:b0:12:fb:72:bc:74:8c:84:4e:da:2a:5d:
e8:76:7e:1f:02:66:80:f9:5f:ec:2b:b5:a9:68:15:75:7d:1b:
e1:7f:53:06:42:c7:29:3c:a5:ac:8c:ad:f5:4a:9c:7d:ed:aa:
bc:7f:a8:da:ae:ec:2c:d1:95:27:c3:b8:81:4f:3b:94:dd:e7:
3e:6f:0e:db:e5:e1:b6:a2:5d:bb:b3:44:25:60:a1:f5:02:d5:
66:c8:48:44:90:e6:cd:35:18:1d:59:36:dd:3a:a4:ac:19:a8:
64:38:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:43 2025 by rpki-client