Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: 7CL+SbaQ8SBrgdZCmhidPX0jbcBa5rQ1h56Kr0mYJA4=
Subject key identifier: A6:74:03:CD:AD:26:92:E6:23:1A:E7:D7:E8:A7:BC:18:8C:8D:4A:6A
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01974B8DCB844D4CE8CA8ACDDE506A54787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0DCB
Signing time: Sat 07 Jun 2025 18:01:13 +0000
Manifest this update: Sat 07 Jun 2025 18:01:13 +0000
Manifest next update: Sun 08 Jun 2025 18:01:13 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: 4jhJNzG1OZOEj1qO5dYyrwVUJAdP1GKJZ5iZRSTYqKQ=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:cb:84:4d:4c:e8:ca:8a:cd:de:50:6a:54:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jun 7 18:01:13 2025 GMT
Not After : Jun 8 18:01:13 2025 GMT
Subject: CN=a67403cdad2692e6231ae7d7e8a7bc188c8d4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:9a:9d:69:30:a6:e8:3f:f1:36:f3:46:19:
ed:09:48:95:f8:85:e4:c2:29:94:e4:65:dd:37:d4:
5b:f0:fe:fa:a4:bd:a4:74:35:98:e1:1f:7c:87:02:
f8:8e:14:de:fe:b4:a1:ca:d2:72:f6:c5:07:c4:63:
51:f8:e2:76:8b:42:3c:86:30:2c:fa:2d:91:7e:27:
02:fd:c0:37:9c:ff:5f:2e:3e:0f:7b:1f:03:c7:88:
54:c6:e3:c8:30:88:30:f4:78:4c:f7:22:31:ce:9c:
88:a1:39:b3:81:0e:13:39:d5:b1:3d:c7:5c:da:db:
fc:e3:11:bd:7d:8d:92:a7:8b:8b:ce:9b:ce:93:93:
3b:f4:80:20:20:1b:3d:ef:b9:5e:c3:bb:09:e9:ff:
9b:35:b1:2c:bf:35:a7:52:68:07:85:11:5e:c2:57:
34:11:57:55:07:07:85:1c:57:bd:2e:e2:ca:e3:f0:
80:b8:83:48:7b:32:d1:83:9f:66:0a:81:e8:56:85:
45:6e:72:c8:cd:65:8e:0a:d2:af:17:82:9a:21:67:
c0:0c:64:f0:e8:af:34:c3:20:a9:a4:a8:e5:3d:a1:
a3:1f:0c:d9:62:10:4f:19:db:99:31:1c:19:1c:ab:
81:92:60:e5:47:dc:d1:d6:3b:cd:c9:43:f0:51:81:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:03:CD:AD:26:92:E6:23:1A:E7:D7:E8:A7:BC:18:8C:8D:4A:6A
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3a:10:64:c4:12:8e:d2:28:4e:64:25:13:ce:15:39:2b:24:
1d:94:fc:1f:b9:a2:6f:7e:fe:71:61:5e:c1:4a:30:8d:c2:c5:
24:85:bd:73:65:3b:cc:4b:67:a7:69:95:de:6b:7c:a8:90:48:
85:cc:13:95:30:4f:ab:c0:dd:a6:dc:0e:3f:0c:a0:51:01:20:
a1:a9:a7:95:45:12:4b:e7:fe:98:33:75:0a:f9:f5:f1:eb:5e:
fa:81:ef:c6:13:54:b6:60:53:65:b5:11:a5:75:aa:40:d4:b0:
28:03:d6:87:08:65:94:82:79:14:e9:96:e2:75:2e:56:96:55:
ea:bf:b8:dc:6c:9b:ce:65:a3:c5:4b:11:55:9c:9d:ae:9d:0f:
ee:52:0d:78:e4:2b:17:c6:05:5f:69:02:6a:70:30:2c:2a:39:
98:60:30:80:7b:f6:7c:3b:5c:22:d9:4f:ed:e2:f4:ba:65:24:
be:75:bb:e3:40:e5:a9:8f:1b:8d:6f:ca:51:d6:59:d2:ec:7c:
62:71:d3:69:c7:ea:a3:98:96:e9:9c:cd:e6:98:9f:a7:07:8f:
7a:d8:26:9e:67:8c:29:f2:33:54:ff:12:9b:ab:ec:91:ca:f7:
e6:a5:00:84:1a:94:7c:ea:57:b1:34:e2:d9:45:a5:86:24:3b:
4a:a9:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:19:20 2025 by rpki-client