Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: 5h+2/tP02WczKW7i912l8aaK3ja/A4qTzoqxjabmUCk=
Subject key identifier: 59:06:07:4B:DA:E2:52:D3:1D:93:EB:D4:8D:D1:28:9E:43:86:48:AB
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019748FA86FE436978801F74194788BF0AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 14E5
Signing time: Sat 07 Jun 2025 06:01:07 +0000
Manifest this update: Sat 07 Jun 2025 06:01:07 +0000
Manifest next update: Sun 08 Jun 2025 06:01:07 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: VK/XfARoGY0AiwidpZn1+o4kqFkO6eKqOipBz4j5hJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:86:fe:43:69:78:80:1f:74:19:47:88:bf:0a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jun 7 06:01:07 2025 GMT
Not After : Jun 8 06:01:07 2025 GMT
Subject: CN=5906074bdae252d31d93ebd48dd1289e438648ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:9d:7c:37:e3:a5:cd:88:8e:76:5d:a3:d3:
87:64:62:4a:9b:8b:8a:5e:5c:48:bf:6d:39:40:60:
6d:db:1c:e0:23:97:27:11:d5:61:76:4a:d6:2b:7d:
2f:48:2b:a3:a3:00:6c:9b:0c:44:9c:f3:45:40:6c:
fc:49:c1:b8:98:83:51:de:23:1b:25:7b:e4:87:89:
cb:f7:de:28:e7:2f:73:9d:a7:c4:a6:d7:f7:d8:78:
6e:ca:de:99:da:eb:d4:f3:87:ab:30:6c:d5:c0:ab:
47:78:62:a8:6e:cf:42:6a:94:94:24:e3:fc:78:b3:
c0:00:d0:a7:1f:43:6b:b2:fb:7d:6f:ab:9d:75:69:
28:b9:df:0e:19:ea:54:d7:c0:4c:48:8b:56:21:f9:
e1:02:01:cb:29:41:77:40:4f:81:41:84:dc:00:72:
94:65:bf:b3:4f:6f:e7:6a:3b:c9:48:5d:f8:4b:f4:
48:4d:40:7e:b3:c6:a9:56:c3:f7:4c:c1:18:63:67:
73:5d:01:df:26:d2:cc:cf:37:45:85:c7:15:12:1d:
87:0c:12:08:b3:55:a5:a7:49:31:b5:64:d4:e2:ed:
f4:6c:90:8f:97:4a:3e:38:b2:a3:41:55:dc:cd:52:
a4:73:30:25:ea:3d:45:dc:b0:de:01:88:0d:26:70:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:07:4B:DA:E2:52:D3:1D:93:EB:D4:8D:D1:28:9E:43:86:48:AB
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:14:90:a2:17:00:04:ed:64:cb:bd:2b:63:9e:06:ae:94:26:
b2:54:d9:ec:b5:53:77:c8:0f:cd:08:a9:e9:5d:3c:18:d4:19:
00:d6:20:c8:b5:3b:0f:fb:0d:f6:21:36:36:71:53:92:01:ac:
c5:4f:55:3a:0a:af:18:df:0e:b1:bd:1d:e0:e1:37:67:b6:67:
60:b5:bf:ad:7d:2b:c0:b8:f8:bb:2e:07:1a:c6:76:8a:bc:44:
25:44:db:cc:6a:23:e0:d5:56:2b:88:8a:0c:a9:0a:ee:ee:4a:
db:8d:29:03:ba:43:fa:83:0a:12:6f:af:c8:28:61:e7:28:10:
b5:b7:4d:e5:0d:e0:00:5f:92:f5:ac:1f:29:41:37:f6:5e:bd:
d5:33:96:59:c5:a8:1d:52:8c:6a:53:0c:e0:79:4b:39:4d:bd:
3b:3c:65:9c:90:e5:f6:cd:74:dd:74:8b:95:4d:bb:c9:0c:cb:
9f:2f:79:c1:9e:f4:67:c1:34:d4:8f:14:0a:e2:b3:70:7a:02:
31:17:5e:eb:a3:50:3d:f2:93:9b:95:e3:62:16:6f:4e:db:c2:
de:2c:41:88:4a:b9:7a:85:1c:1a:cf:0b:e5:f0:f3:74:48:cf:
2b:7b:0a:95:fa:fd:08:2f:1b:b5:82:af:77:ae:94:19:89:6d:
cb:54:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:16 2025 by rpki-client