Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: q0HiCA1zYTCapz4vIVUQ9IJDgokY5j+5Hgqa1fkzB5c=
Subject key identifier: FE:32:A9:E9:1E:AB:F1:18:4A:DB:6F:7D:70:68:B9:20:0C:D5:42:04
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0197530FE030D61D383BC351F0030354687C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 05:00:38 +0000
Manifest this update: Mon 09 Jun 2025 05:00:38 +0000
Manifest next update: Tue 10 Jun 2025 05:00:38 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: nBEozp5iFp08b6IpIiTYl5m7JtWOABYvnPRF/h2Y9PY=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:e0:30:d6:1d:38:3b:c3:51:f0:03:03:54:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 9 05:00:38 2025 GMT
Not After : Jun 10 05:00:38 2025 GMT
Subject: CN=fe32a9e91eabf1184adb6f7d7068b9200cd54204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:c7:5f:b1:a6:4a:f4:b2:4e:71:23:1e:8a:
44:62:3a:dd:e8:2f:ee:5d:63:16:e9:c4:5f:80:b7:
3f:c1:ef:b2:a7:2b:a7:8b:71:20:cb:b7:ac:a8:f6:
46:48:43:04:42:e5:94:42:82:3f:69:2c:67:4f:1a:
40:6a:e1:e4:7c:3b:0e:6c:29:99:85:75:62:51:da:
b7:77:50:2a:7c:7c:c1:9f:64:3f:42:ac:ed:59:34:
3a:17:41:76:0f:66:9d:81:3d:a9:f8:b8:5b:e2:1e:
23:a5:e7:5c:5d:87:ac:1e:ca:a4:1b:e9:91:b2:d1:
d4:5d:92:1a:e4:5c:a8:b8:5a:e4:3a:a1:1b:e7:89:
d0:50:70:a6:30:34:17:8b:67:a4:6b:df:41:2e:3b:
04:38:3e:fc:2e:40:c3:97:04:6b:f2:68:8d:72:ab:
a9:24:9c:d3:ba:b1:4e:49:e8:87:29:e8:1a:ce:f3:
c6:0f:da:91:3b:a0:a3:92:94:48:13:34:07:7e:24:
26:ca:37:ee:7b:7a:8b:24:b0:e3:ab:64:3e:88:2f:
a0:9b:0e:ad:17:f6:94:8d:ca:61:ba:d9:3d:cd:53:
dd:7a:57:d2:12:50:da:b8:c1:c3:cb:43:20:c6:36:
6a:05:47:03:a3:d5:8d:bb:d6:32:48:4e:ff:b3:49:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:32:A9:E9:1E:AB:F1:18:4A:DB:6F:7D:70:68:B9:20:0C:D5:42:04
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2d:5b:9b:29:90:52:2a:ed:42:33:c8:ea:4a:e8:5c:04:bd:
8e:64:13:4b:22:43:8d:f9:31:47:e7:be:eb:c4:ca:29:a8:9f:
aa:d2:2a:4e:ba:f2:c5:90:ea:d0:bb:cc:a4:ac:55:97:66:17:
3b:00:f8:a2:55:67:e2:46:ee:1c:b6:03:ba:29:45:4e:76:0a:
de:a9:ad:55:ba:bc:d7:3f:73:08:8e:36:e2:53:5e:ab:e0:cd:
0e:17:2b:c4:53:50:6c:57:4b:aa:45:62:75:ce:3d:0a:f8:a6:
ce:72:46:0f:a3:0e:0c:cc:2a:c0:23:38:52:f1:9b:cc:3b:9b:
0e:43:15:28:d6:96:6a:3d:c4:c9:bc:4c:16:8f:49:1a:e5:4d:
88:3f:ba:18:2a:3c:b4:43:0c:6d:2c:21:fd:aa:c3:0c:4e:d8:
66:1c:c3:fb:89:3a:56:75:e4:2d:ee:50:04:a8:f9:d1:18:b5:
cc:0d:75:28:29:ba:35:72:a6:84:ce:71:3d:6e:79:05:00:00:
f6:e3:57:1f:65:49:aa:3c:63:80:9e:89:88:64:0f:43:e3:e6:
6c:93:d6:e3:05:57:65:de:0f:aa:13:01:68:88:a4:a5:a0:4b:
b8:51:b4:a3:0c:92:90:79:c2:5f:65:5f:9f:97:94:9c:4c:e2:
f9:d7:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:30:57 2025 by rpki-client