Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: QLpHuTXEc+kMVu+hN2LPRbhoKVU4U3MV9vyVzdOlq8I=
Subject key identifier: 1B:38:37:96:94:B6:C7:83:22:B1:35:28:42:63:3D:77:82:8B:99:D0
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0197470B8B23E173AB1679715CF2EDB232B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0A9D
Signing time: Fri 06 Jun 2025 21:00:28 +0000
Manifest this update: Fri 06 Jun 2025 21:00:28 +0000
Manifest next update: Sat 07 Jun 2025 21:00:28 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: ccAI6wtsoHpBLtwrUpfkaYmFGIP3Hl3bqvEdcW5SONw=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8b:23:e1:73:ab:16:79:71:5c:f2:ed:b2:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jun 6 21:00:28 2025 GMT
Not After : Jun 7 21:00:28 2025 GMT
Subject: CN=1b38379694b6c78322b1352842633d77828b99d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:3e:f5:e2:9a:22:da:be:70:d7:7e:28:9a:
95:a9:dd:be:34:a0:c0:48:7f:eb:3b:db:ea:33:a6:
0b:dc:f0:d2:fd:12:4f:c2:9b:e5:5c:e3:e1:48:d9:
4c:01:07:e7:0b:4a:4d:c7:e7:82:25:b3:f7:e8:81:
8d:55:f2:93:8a:9a:7a:a9:96:d4:54:48:33:6a:e5:
30:c2:f1:fc:a7:47:6d:8d:e2:09:7f:69:3b:0f:41:
6d:d8:73:27:24:c6:a4:45:d1:a9:9d:c7:50:9c:f6:
53:6f:77:7b:3c:9e:a3:96:6a:1b:37:3b:45:57:d4:
cd:7a:4f:62:a9:93:de:5b:0a:c1:f9:92:2f:ca:1c:
06:0a:d8:d1:75:86:49:95:b6:25:84:a3:62:8a:0f:
ca:6c:c2:31:91:df:9a:e5:be:72:2f:02:79:a3:93:
5e:51:54:e2:3b:ee:c4:ad:7a:79:d5:90:45:a7:59:
68:08:be:37:68:e4:7e:61:cf:f4:e9:f1:d2:4a:7f:
7a:a5:12:ae:15:ea:1b:cd:29:f8:e2:b7:ed:8a:94:
39:0f:d3:ab:84:f1:03:c0:f7:7f:08:22:87:df:ff:
10:9b:6d:00:61:61:ba:19:25:4f:c5:91:dd:d7:ed:
0a:a8:32:4a:e9:ee:e4:f2:30:6b:e0:c0:b4:36:e2:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:37:96:94:B6:C7:83:22:B1:35:28:42:63:3D:77:82:8B:99:D0
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3a:4e:4e:0c:01:a4:7f:5a:6b:05:51:08:55:16:38:ff:dc:
e4:b8:d5:1e:2c:7c:ea:52:56:e9:1a:a5:0a:e9:28:58:51:d9:
46:0d:42:d9:ad:2b:15:4a:15:06:07:ea:95:db:c8:a0:99:2c:
68:98:f3:53:ef:e7:73:21:d5:99:0a:e2:19:52:fe:2b:80:10:
88:c3:57:c9:cd:97:4a:b5:fa:7c:28:a5:68:1f:a5:7a:be:a9:
c4:d5:24:39:33:92:5c:11:c0:2b:ae:1b:6e:03:67:c3:36:9e:
a3:d0:0e:39:8b:bc:76:dc:dd:31:19:05:b2:8f:e4:1d:f4:a8:
8b:e3:d0:9c:31:4c:52:d6:dd:bc:4b:4d:77:36:37:17:39:36:
77:b5:61:83:c8:07:1c:7f:b8:65:4e:16:fd:94:ac:75:eb:36:
37:71:9b:1a:0d:7e:dd:ed:b7:b5:e7:21:40:8f:00:79:cd:0c:
b4:aa:5c:81:55:39:37:10:d6:e5:37:67:7f:15:9e:36:b2:e9:
15:9b:61:8c:c8:74:e2:dd:64:cc:34:f2:85:e5:2e:93:2b:9f:
99:53:88:b9:57:2b:57:18:8b:58:07:c7:a8:16:c2:ae:e6:3c:
13:3d:ec:29:8f:6e:2f:63:92:26:97:00:a7:74:53:53:cb:3d:
43:88:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:47 2025 by rpki-client