Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: g1Eml7lIa5Q0UIuaE/SIIDp3zYjMM2Me9VV8lkDYn44=
Subject key identifier: AD:9B:19:4F:CA:F1:05:DB:4E:03:AD:A3:EE:D5:FF:7A:DE:9E:41:BE
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 019748559BD4EE2EAE8D4DC4DC2F52298AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 03:00:59 +0000
Manifest this update: Sat 07 Jun 2025 03:00:59 +0000
Manifest next update: Sun 08 Jun 2025 03:00:59 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: flAhNgTg9baqx3xhdUV4LGTBAOzipb20yEGDoTvvnKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:9b:d4:ee:2e:ae:8d:4d:c4:dc:2f:52:29:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Jun 7 03:00:59 2025 GMT
Not After : Jun 8 03:00:59 2025 GMT
Subject: CN=ad9b194fcaf105db4e03ada3eed5ff7ade9e41be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:77:19:20:42:39:30:df:14:d7:6c:e4:30:
75:37:aa:58:dd:2f:24:b6:9c:6c:20:62:e6:87:4a:
ed:c4:19:8f:06:08:2e:97:1b:de:b9:28:fc:a8:cb:
fc:e0:6e:9b:5a:80:15:4b:3a:16:e4:bf:5a:ac:44:
c4:ec:a1:b8:19:ea:d2:d7:ee:2a:61:02:8d:1f:bc:
b9:18:55:06:ca:ee:d2:d8:4c:07:e1:cf:52:20:c6:
3d:d4:fc:54:36:5b:6b:88:e2:5c:b0:5d:9f:5c:f4:
a2:98:5c:29:f9:70:84:26:1f:82:c5:8f:c1:8a:34:
9e:ef:e3:b3:ce:76:25:ea:3d:f0:21:d2:9c:5d:2f:
18:20:f0:48:8d:e3:07:99:fb:57:4c:f2:96:df:b9:
71:37:d2:3f:8e:6a:9b:7a:b2:fd:09:7b:d3:aa:90:
c1:0f:36:18:c5:74:99:ce:0a:43:3e:6b:e4:07:b7:
5e:e2:c0:ee:26:b3:f5:fa:3b:98:db:01:a8:b4:5d:
9c:bd:89:86:b0:d9:92:fd:31:c2:f4:e0:52:c4:dd:
e7:d8:93:3a:f0:a5:20:72:d9:78:01:73:91:2c:87:
96:53:f2:69:cb:d4:fe:0d:f1:94:4d:3b:f8:97:f9:
8e:36:44:de:b1:3b:44:36:d8:12:72:e4:c8:b1:ff:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9B:19:4F:CA:F1:05:DB:4E:03:AD:A3:EE:D5:FF:7A:DE:9E:41:BE
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:49:b8:ac:4f:4f:48:00:4b:9c:14:e5:0b:d3:67:6f:3d:
40:bc:78:ff:7c:53:98:d4:d2:be:a4:05:e2:44:06:5d:57:0c:
5a:1d:f9:c0:38:ce:10:a7:06:39:0b:22:50:8b:20:97:9b:e7:
9c:b3:87:02:f3:43:01:a0:21:3a:f6:58:80:24:b4:17:6a:5e:
fe:f4:a5:df:2d:4a:0f:66:2b:23:7a:1b:45:c9:4e:a7:b3:c6:
53:3c:b6:1a:91:69:8d:da:f9:9d:b0:a7:5d:98:94:66:66:5f:
e8:24:9e:28:e5:99:de:e6:ab:48:a8:e4:66:a8:38:74:ba:98:
35:52:61:75:d4:93:f7:b8:36:5a:36:13:77:1b:b2:f4:57:86:
6b:d7:ad:89:75:b5:f0:ce:28:cc:08:ce:f9:61:0d:fc:eb:75:
81:bb:e4:2a:2d:a8:99:ad:df:3b:3a:c5:f4:31:97:ec:db:e9:
82:ea:30:c5:71:d2:19:ee:c0:ba:3c:d8:53:8f:56:69:54:dc:
81:ca:e1:f5:e7:0b:73:53:88:4e:78:4c:70:4a:c6:85:77:ee:
c2:81:ec:31:3c:d1:40:8b:2a:9a:12:72:1c:33:d8:5f:a5:05:
32:cf:fa:ff:75:f0:a9:cb:2f:cf:43:aa:10:e3:53:f4:1f:a1:
68:51:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:54 2025 by rpki-client