Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: vw4lCDHlNik7RF7ZuRIQ2bvEE0ngYJ6aiTd29fKfhIU=
Subject key identifier: A5:76:4D:F9:91:E0:10:B9:08:88:E4:C3:E0:43:E1:0F:01:0C:DF:2B
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0197684E30A7FC922D0240963F4AE1E4C7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:44 +0000
Manifest this update: Fri 13 Jun 2025 08:00:44 +0000
Manifest next update: Sat 14 Jun 2025 08:00:44 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: y76vLNH9F5FAvcUspupaQI5qH+/l5d7VKFQ76CG1ds4=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:30:a7:fc:92:2d:02:40:96:3f:4a:e1:e4:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 13 08:00:44 2025 GMT
Not After : Jun 14 08:00:44 2025 GMT
Subject: CN=a5764df991e010b90888e4c3e043e10f010cdf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3d:40:e5:12:c7:2a:72:e1:41:0f:e5:f7:3e:
3e:8a:f5:2e:82:4f:a2:39:fd:ec:b0:ed:cc:0e:4b:
6f:45:5a:ac:48:b4:77:46:49:09:31:4f:24:9a:da:
d6:92:a3:b1:99:6f:68:fc:71:51:82:0b:95:d3:9d:
0e:33:90:eb:a0:85:53:71:b1:17:08:d2:86:e9:d4:
4b:cb:49:35:b3:df:29:50:45:94:13:78:31:81:f0:
73:e4:6f:33:0a:da:75:fc:36:9c:8b:cc:12:ce:9d:
c6:36:15:c1:76:b2:5b:66:37:21:99:d0:03:53:a2:
ca:dd:34:92:8b:df:89:29:77:95:1f:46:1c:26:31:
d9:c9:a4:98:7a:f3:41:8a:3a:66:63:01:ac:7b:8f:
42:78:cf:8b:0a:9d:5e:72:33:cb:5c:4b:fd:4c:51:
86:e3:99:ad:c1:03:70:2b:1c:9a:84:df:a8:31:eb:
4a:18:8c:27:74:d7:25:e6:2d:12:fe:1b:7f:fb:04:
12:1a:84:62:11:32:e6:01:c2:be:4b:43:18:34:df:
b0:41:07:b3:56:a4:79:90:6d:25:62:0b:4b:aa:e7:
b1:bf:7c:1a:b5:e0:37:0a:7e:ea:c9:3c:5f:b7:d4:
e8:67:94:9d:70:61:c7:7c:ff:93:97:4f:89:9f:6b:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:4D:F9:91:E0:10:B9:08:88:E4:C3:E0:43:E1:0F:01:0C:DF:2B
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:69:f3:a7:87:63:67:ab:79:6f:10:c4:8a:0c:f1:48:2a:
d0:4f:f5:71:b2:ae:92:d6:c3:66:64:3e:61:60:ee:c2:16:57:
c8:28:78:1f:34:ea:71:fb:fe:4d:ce:1c:7a:a6:0f:4c:34:6a:
79:b1:86:6f:ad:76:0b:1b:f4:b0:60:42:47:0f:81:8c:ce:ba:
00:1e:a2:9b:f0:c6:a0:51:95:ad:55:1e:69:47:a2:a2:4a:88:
37:46:d1:84:99:15:98:cc:a3:05:05:79:b0:19:c8:85:88:08:
75:49:01:27:64:fa:37:7c:c8:5c:13:83:87:f7:5f:45:ba:2f:
f7:14:d2:bb:80:7f:78:6a:77:44:4e:e9:7c:e1:56:ce:eb:05:
7c:7a:30:96:57:44:90:82:68:2d:06:ad:a3:d6:39:18:ec:ca:
7d:d5:06:f2:cc:66:54:4d:06:95:51:25:c2:47:31:87:4e:4e:
d3:ec:4d:99:e1:98:c0:0c:a1:31:d2:16:c6:2d:63:47:78:d9:
58:db:92:41:e5:25:f7:61:cd:b8:b5:7a:ba:d8:67:91:ff:48:
3f:9e:6d:18:2e:e5:51:94:5d:9c:b2:0c:0d:08:dd:1c:21:16:
d5:82:ad:eb:e6:6d:6f:ad:f3:96:c6:c0:80:6b:40:b6:e5:d1:
30:19:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:22 2025 by rpki-client