Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: I5gTcBW1QKNZaLTM6HnHRdrwTbG6+86JbuHW4nQ/CAM=
Subject key identifier: 80:4F:A6:A0:F6:C8:1F:C7:23:C1:7E:F0:D0:0A:B9:71:24:76:59:73
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 01974DB2BE2DE21F4B127A2E285AC87B101C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: DbGOkKkxEqg8FhRiu6yLUXtO6zhmbQ4yBMoPMXC4mP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:be:2d:e2:1f:4b:12:7a:2e:28:5a:c8:7b:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=804fa6a0f6c81fc723c17ef0d00ab97124765973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:b8:7e:3b:7a:58:57:7a:73:5a:c9:93:07:
3a:0b:e5:5f:91:14:a1:5a:47:69:48:93:51:91:7c:
c6:5f:71:a1:06:f1:84:e6:3c:30:51:94:fc:da:40:
5c:60:16:9a:87:dd:5d:76:c2:41:a4:f4:e5:60:6c:
3b:80:f6:26:94:2e:59:98:f3:89:d2:a7:a0:ee:45:
d2:93:47:60:f5:2f:b9:3d:f1:66:96:98:eb:6b:6f:
0f:3b:a3:4a:c8:22:60:ae:43:ea:b1:83:79:88:b9:
89:b9:f0:69:61:ef:70:0c:91:2f:d7:06:e2:58:3e:
3f:46:dc:60:37:29:50:eb:0f:58:bf:9d:6f:2a:7d:
81:4f:4a:23:14:10:04:17:31:43:e6:c1:dc:48:f3:
97:ec:93:30:8d:40:d6:ce:9a:5a:eb:e6:f7:39:bb:
e2:4b:d6:21:96:07:6c:a3:c5:f3:a6:87:ee:66:26:
24:54:f7:bf:4a:ea:c0:91:75:d3:cd:0e:fd:dc:1f:
25:c3:17:c5:73:45:f0:ba:46:71:17:f5:d7:d2:22:
af:d8:85:61:c5:46:ec:66:f1:ab:1b:59:12:a8:4d:
f9:ff:8b:14:08:1e:5f:2c:fd:67:dd:db:8b:85:28:
f6:f4:ee:e4:fb:4c:ec:18:d9:46:b4:82:c6:b5:b3:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:A6:A0:F6:C8:1F:C7:23:C1:7E:F0:D0:0A:B9:71:24:76:59:73
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:4b:43:c1:1d:94:da:0b:8d:b4:6f:35:58:17:a3:6a:9b:
93:12:1c:d6:69:0c:0b:6a:61:54:a8:1c:2f:ff:9e:36:62:a8:
1e:ee:0b:38:43:d0:cf:97:4b:97:1a:12:b7:29:53:9a:cc:f5:
f7:50:65:e6:b5:85:06:c2:0f:90:13:26:27:a0:76:91:34:cc:
28:81:a5:8a:8c:ec:d3:49:09:4e:09:53:c5:46:7b:3e:85:85:
7a:90:84:68:86:87:1c:1c:b8:ef:13:75:b9:59:2a:ad:bc:04:
48:51:e8:3e:66:78:58:0c:03:42:af:c7:42:fe:e9:71:0b:0d:
c2:0a:95:83:c9:c3:4b:05:9c:03:58:54:43:7c:5a:36:6f:aa:
bb:ce:ab:36:5d:7b:be:dc:21:c8:01:e2:43:50:d7:95:b4:bc:
4d:18:fe:47:02:ae:20:13:fd:0a:98:db:c1:7f:42:ba:b9:45:
6b:83:9d:c4:58:dc:ae:30:e7:a0:ca:a3:5f:aa:ba:26:f3:04:
ba:16:b1:3e:a1:68:03:a9:1a:a3:66:93:fc:f5:f6:ed:87:dc:
16:1a:7b:83:15:de:d0:6e:2b:dd:d8:98:08:0a:10:e9:d9:ec:
c8:27:2d:a0:35:c4:c3:3d:a5:d3:24:55:5a:6b:94:95:23:03:
0a:3c:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:32:26 2025 by rpki-client