Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: c0vki7ecWbY6T56Vx45ykolwS9+9BVczyn9yA5qbHaM=
Subject key identifier: 0E:90:E2:18:74:25:10:7A:18:24:E7:6F:65:CA:06:AF:F7:1C:5C:DE
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01974A43C84195B014C7351A88C1A6ACC8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:45 +0000
Manifest this update: Sat 07 Jun 2025 12:00:45 +0000
Manifest next update: Sun 08 Jun 2025 12:00:45 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: nAZszpYcnXonzErgjGF0SDJyoIOD4lkJn9OijAJBMX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c8:41:95:b0:14:c7:35:1a:88:c1:a6:ac:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jun 7 12:00:45 2025 GMT
Not After : Jun 8 12:00:45 2025 GMT
Subject: CN=0e90e2187425107a1824e76f65ca06aff71c5cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:d8:c4:c3:93:9e:0e:a3:8c:da:d0:82:31:
13:8d:fb:06:e5:53:d3:7c:26:86:63:39:08:a2:2f:
6a:e3:d6:d2:b3:da:c5:b2:f7:c2:86:0b:d6:25:7f:
0d:24:43:06:2f:10:2f:88:ed:3e:31:ff:1c:17:8c:
17:a3:3d:8c:a3:64:ee:a1:26:1e:de:96:33:c3:8e:
e9:eb:ab:f2:09:41:4d:be:d3:a9:39:02:bd:62:88:
4c:e1:ad:65:75:25:37:41:5c:90:b5:0f:9e:3d:ff:
0f:05:9a:87:2e:c9:5e:4c:06:00:24:31:ae:f9:66:
8d:9a:43:2b:73:9d:75:9f:b1:76:2b:55:78:4e:7a:
d0:7b:19:4f:05:2a:98:be:4a:fb:bd:71:87:e1:97:
ba:17:c4:98:57:42:3b:0a:9a:e5:fe:28:45:91:2a:
8c:4c:87:97:aa:c6:ab:c8:a1:35:e2:2f:0c:2f:c2:
f7:50:3f:c7:9e:c6:bf:f5:41:68:be:9e:18:e7:3e:
97:17:52:63:c6:0e:11:ed:84:ec:f0:c2:4c:d9:a8:
d7:ca:97:c9:a1:56:55:a1:07:2a:c2:f4:c5:71:f1:
5e:1d:b4:cf:aa:2f:67:35:eb:51:b9:43:ac:25:60:
85:98:3f:ab:9c:0d:b6:e1:75:f7:8e:1d:d2:c3:73:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:E2:18:74:25:10:7A:18:24:E7:6F:65:CA:06:AF:F7:1C:5C:DE
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:b5:d9:6b:ef:39:f1:b0:0f:db:16:92:23:d8:4e:d9:61:
22:08:85:7d:3a:64:c2:f1:25:4a:cb:fd:06:b7:9d:3f:11:28:
5b:86:61:8f:16:5c:00:89:59:66:6a:ec:cc:e8:56:cb:c8:f5:
53:e9:6e:b6:37:54:19:59:6c:b4:33:67:47:0e:c3:e5:62:a2:
68:67:b2:a7:f5:8f:c2:0e:93:6c:09:c0:44:c6:eb:37:76:2a:
4a:4c:c2:f7:2b:4a:f7:f7:78:a8:ae:dd:9d:e8:ee:5b:9a:97:
d8:fe:a3:e0:d4:3b:98:ba:f2:00:00:d3:33:f1:e2:85:4e:1c:
a7:9b:c5:4c:c0:21:c0:a9:f2:40:d1:c6:e6:2b:b6:d8:95:d1:
34:f8:bb:37:69:8c:9e:11:39:ce:cd:48:90:af:53:0d:f7:2f:
92:fa:19:02:5c:ac:f5:e5:ea:e9:ae:2f:4c:4d:62:0e:4c:c0:
6c:10:2d:18:3d:4d:86:f2:0b:9e:9d:bb:ea:b4:eb:cc:f6:c7:
84:b3:b8:f9:51:d0:89:c2:24:c2:96:bb:27:05:4d:ba:6f:66:
19:d5:eb:5b:26:2a:42:22:57:11:dd:52:36:b3:5a:2f:d5:e8:
af:16:c6:e0:0f:c5:68:20:f8:bb:8e:13:22:8d:c6:76:0a:d4:
2a:31:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:42 2025 by rpki-client