Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: LxtnV8lVhLa3yDZ/5M5iMCfxJcEzNMtyXbyZ8U3TYtY=
Subject key identifier: BC:48:78:27:1C:B8:5D:E6:81:09:03:92:62:F0:52:83:9E:7D:1F:32
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 0197617045C0CC572A0EFBD8ED559BE0F737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 00:00:37 +0000
Manifest this update: Thu 12 Jun 2025 00:00:37 +0000
Manifest next update: Fri 13 Jun 2025 00:00:37 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: O/Hu2sbn+d1ESqkJ/f6U4YQ/jHSIXeV4wJEDp4OG1T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:45:c0:cc:57:2a:0e:fb:d8:ed:55:9b:e0:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jun 12 00:00:37 2025 GMT
Not After : Jun 13 00:00:37 2025 GMT
Subject: CN=bc4878271cb85de68109039262f052839e7d1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:8a:d2:79:63:df:6a:dc:70:9d:b3:45:4d:
ca:b9:30:7a:66:a6:76:c6:2f:b7:2b:75:8f:c5:dc:
81:87:e3:8a:63:2e:9c:6c:69:b5:ec:a9:b5:f0:bb:
b9:43:41:3c:cf:40:8c:65:09:15:ba:fc:de:b5:61:
3e:2f:07:67:73:d5:d5:a8:f3:9e:1d:f8:5a:a8:6b:
44:74:91:d2:7e:89:b2:d8:a2:c3:21:d1:01:c5:79:
27:89:d6:f6:fd:1c:b4:4a:31:b8:98:7e:77:9a:14:
05:e0:4d:19:9d:96:ee:0b:6d:63:6a:dc:3f:af:15:
fa:40:cc:0d:30:23:b3:d0:94:da:d6:00:ef:77:e9:
07:1a:43:0b:71:77:76:86:cc:57:e7:8d:21:e2:7b:
89:e7:49:06:42:cd:4c:69:d0:59:ee:ba:3e:59:3f:
11:32:c5:2a:d4:1f:2a:b8:d3:8e:9a:33:cc:ae:74:
65:3c:b6:98:94:78:a7:30:31:28:24:9c:57:dd:4c:
8f:8f:c5:fd:c6:72:14:d8:e5:1e:f4:84:c7:ab:65:
d2:2b:39:b2:df:89:46:97:f0:2a:08:b7:8f:f8:40:
ac:e6:a8:76:14:ae:49:c3:f0:8a:49:62:b2:b6:40:
88:30:f0:2f:88:e7:8f:2d:fb:67:35:fd:29:c8:8a:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:78:27:1C:B8:5D:E6:81:09:03:92:62:F0:52:83:9E:7D:1F:32
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:88:45:ed:6a:71:c3:77:a7:45:6a:44:76:4b:74:a2:e7:
af:8d:1d:9c:7d:21:61:ce:82:cc:1e:1f:c7:4c:82:e2:3b:99:
d3:31:63:8e:e3:9d:a1:95:9a:98:8b:9e:f2:7e:1e:26:fe:c0:
66:ab:69:4b:26:8e:5d:33:74:06:80:9a:53:b5:3d:4d:6d:63:
7d:98:71:31:a4:2a:15:a1:45:78:51:4e:24:a5:96:54:7f:f1:
8f:c3:dc:34:9e:5e:b2:9a:1e:df:14:22:7a:80:07:16:50:15:
da:e1:14:6d:ed:d0:31:bd:d8:95:17:3d:54:a2:0a:17:11:0a:
56:c9:53:bd:2e:4e:91:c8:ae:63:33:14:6e:b4:2f:65:04:2e:
e1:6a:10:ec:2c:eb:45:7a:de:05:2f:d3:f7:f5:e1:ca:f5:91:
c9:7c:cd:9b:44:c4:2f:8e:5f:c6:18:ae:ee:1a:43:65:de:32:
9e:ce:6e:8b:72:5c:e4:45:b2:b0:0c:73:a7:b0:8f:d7:c7:8d:
cb:ef:58:b6:ba:e1:c7:32:28:2e:74:2a:1f:dc:cf:fe:d0:09:
45:ad:fc:15:f3:39:7e:d4:74:12:ae:45:8e:e2:85:b0:be:00:
84:17:8d:f4:10:2a:94:21:15:9e:14:47:3d:7a:f9:d2:f8:91:
99:17:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:33:50 2025 by rpki-client