Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: biFXhqh8e6FGT6EreGW3Z6w8JdkN9h+htSa/m8uTu5c=
Subject key identifier: 45:3C:0F:7F:4F:D9:4E:AF:98:DA:A9:C3:05:F0:D9:C9:FD:4C:48:C1
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01974BC3FAC8C3D1011B8E06D69EBE435B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 110C
Signing time: Sat 07 Jun 2025 19:00:24 +0000
Manifest this update: Sat 07 Jun 2025 19:00:24 +0000
Manifest next update: Sun 08 Jun 2025 19:00:24 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: lms90UKhXI6FkDSL74qaN0lHvw6Q0nPjFx7+/Zh9mKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:fa:c8:c3:d1:01:1b:8e:06:d6:9e:be:43:5b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jun 7 19:00:24 2025 GMT
Not After : Jun 8 19:00:24 2025 GMT
Subject: CN=453c0f7f4fd94eaf98daa9c305f0d9c9fd4c48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:6c:fb:f6:6e:5f:ef:79:90:d6:4c:5a:9a:
4c:bb:c1:38:02:51:19:e2:96:91:bb:79:79:b0:ef:
5f:8c:0e:39:64:2f:01:39:55:b9:11:b6:25:21:f9:
e6:c6:8e:e2:9a:4a:40:52:b7:f4:fe:96:1e:6b:42:
58:fb:a2:ce:ea:fa:d1:ee:0d:db:ff:68:aa:f1:b1:
f3:54:89:ce:e9:9d:24:b7:42:ab:78:6b:02:86:52:
08:f7:39:d2:01:87:71:e5:f4:f2:6b:db:3f:ee:e0:
02:bb:74:41:f5:b1:15:1d:74:62:dc:11:a2:44:c5:
c8:c1:16:fd:3f:cc:72:3e:5c:cb:bc:a6:8a:8c:1b:
29:a9:8a:bf:88:e1:4d:22:96:fe:e8:9f:c0:eb:1f:
09:d2:89:c9:ab:47:63:73:50:6b:77:d3:64:24:31:
de:1b:5d:f8:f7:ac:0a:28:50:7a:21:95:f9:9c:69:
e0:e2:2d:f5:ee:86:d8:ba:d6:30:28:27:e4:b7:e9:
68:7d:e6:86:63:18:0b:89:c9:0d:33:18:2f:a2:40:
d3:25:56:ff:19:16:08:b4:72:ea:32:f1:3f:6e:19:
e4:a3:dd:64:e4:60:ac:4a:d5:4b:25:34:5c:9a:27:
d8:0e:07:4f:9b:63:61:83:6b:20:be:b3:15:16:98:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:0F:7F:4F:D9:4E:AF:98:DA:A9:C3:05:F0:D9:C9:FD:4C:48:C1
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9d:84:ee:7a:50:56:e4:12:03:52:94:cd:27:83:ff:1f:63:
c1:3f:71:56:ff:0a:93:8f:8f:d3:6e:6d:9a:63:0a:3a:29:7f:
4e:47:64:1b:5a:29:ca:10:e5:bb:cb:eb:c8:80:ff:db:55:a7:
05:82:ab:a6:74:97:33:48:b0:ca:30:35:fc:f4:29:c1:87:56:
cc:5b:d9:28:6b:8f:36:98:40:78:0f:58:6b:f4:17:61:59:2d:
85:d1:bf:da:2f:70:8d:cb:98:d2:87:ba:58:3b:e3:43:a1:c0:
4b:4b:d6:a1:71:da:6c:97:94:11:a5:e1:4d:0b:4e:ad:05:73:
11:c8:c2:b0:88:80:cb:0a:d6:d4:fc:eb:fc:f4:08:01:66:60:
af:d5:cb:68:16:4a:ba:ed:b0:d4:5e:70:34:e0:db:fe:c3:4e:
e5:ba:03:28:52:5c:26:92:20:77:c5:de:f2:a7:7d:16:24:45:
eb:3d:80:20:94:7f:ea:52:47:a2:14:9a:b1:3a:55:85:7c:2b:
1f:a5:11:52:5c:f7:b5:15:97:b3:18:59:af:6f:42:d5:5c:30:
e5:16:01:a7:28:82:a9:78:00:49:e5:dc:bf:39:25:1d:c3:f9:
c8:30:8e:83:4f:4e:39:b2:8e:fb:b2:fb:c8:06:36:d2:c5:98:
59:ff:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:20 2025 by rpki-client