Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: 6PkEpeem9kNAJuQ1hK5qnTzF1lwNXHEatvhtDPyT77Q=
Subject key identifier: 62:BD:4D:14:41:AA:FF:CF:16:7D:90:B3:E7:87:7F:26:AE:88:AB:A9
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01974BFB8031744D7FA53CA55F4279758601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 20:01:02 +0000
Manifest this update: Sat 07 Jun 2025 20:01:02 +0000
Manifest next update: Sun 08 Jun 2025 20:01:02 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: y2O6zlA54hukPqeQfO0ZpgndyAMmnaU40oQyDkPspOs=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:80:31:74:4d:7f:a5:3c:a5:5f:42:79:75:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jun 7 20:01:02 2025 GMT
Not After : Jun 8 20:01:02 2025 GMT
Subject: CN=62bd4d1441aaffcf167d90b3e7877f26ae88aba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:1c:9e:44:85:e9:58:d1:b4:c9:38:60:37:
32:0e:a1:57:c7:8e:cb:ad:90:c5:96:82:85:7a:f5:
74:44:26:0d:61:18:07:f1:7c:06:65:a9:55:b4:ef:
73:38:3e:4a:50:15:1b:76:18:91:32:e5:d7:dc:11:
f2:a2:6e:60:da:fe:05:6a:d1:36:fb:88:b8:96:0f:
98:8c:f1:49:2e:95:e8:a9:24:93:bd:9f:e0:36:76:
41:2e:37:e4:0d:41:1c:19:2f:10:81:65:49:d8:a4:
d6:de:e3:59:e3:b0:e1:f6:e2:5c:6d:c2:08:cd:3f:
ea:6c:0e:89:4d:80:16:67:f3:6b:77:8c:bf:43:b9:
98:30:32:28:be:f0:95:25:7d:d7:1c:42:e1:ad:eb:
d0:f6:f7:21:8c:b2:56:43:17:c9:98:01:d8:a8:84:
2d:d6:f2:24:a0:35:da:61:87:53:53:e7:22:1a:4b:
a6:d4:e0:c3:1d:01:cc:0b:44:87:13:c6:b2:4c:3f:
5d:94:30:05:53:2f:f3:bd:59:64:28:58:42:b9:b2:
86:00:6e:bf:2c:52:72:9b:a6:62:30:79:aa:c4:40:
db:79:0b:b7:77:71:ad:33:10:d0:2e:50:73:5f:a6:
5c:10:e0:56:34:df:4f:82:64:80:25:13:ef:63:3c:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BD:4D:14:41:AA:FF:CF:16:7D:90:B3:E7:87:7F:26:AE:88:AB:A9
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:33:9a:3e:89:e5:f2:06:ec:da:4d:67:e5:98:95:24:94:db:
a2:58:35:da:dc:d3:7d:3e:1c:6d:3e:28:19:43:46:9e:25:72:
d8:23:b8:be:59:54:a9:7a:c9:d5:9e:94:20:8f:4a:77:54:8e:
63:28:10:11:e7:2d:a3:29:10:07:11:53:82:c9:d9:3f:9f:ca:
bd:27:c1:b9:fb:70:f6:2f:9e:16:62:55:c8:db:bd:b1:59:f1:
49:b9:42:1c:35:d4:5b:91:2a:2c:77:65:97:0a:31:82:e9:65:
ea:dc:9b:94:90:2c:0b:de:4c:ef:e1:25:b4:65:e0:cc:31:ed:
b7:66:97:d8:a6:fc:02:b7:07:01:23:61:df:81:64:6f:a5:e3:
3f:06:53:e7:1b:64:53:29:d2:75:ee:da:22:dd:93:2a:ce:a5:
5f:da:96:97:7d:e0:6e:6a:4a:51:c4:77:0a:a5:b0:d5:6e:00:
05:fe:39:23:0a:e8:68:8e:a5:5c:ee:19:14:86:07:61:a5:40:
2b:cd:ec:42:0a:db:ed:20:e4:d5:91:dd:8d:ee:da:51:d2:f7:
df:2b:06:d2:79:01:24:4e:10:6a:ee:9c:57:d3:69:2a:15:4b:
49:ae:62:01:9f:f5:50:95:f8:8a:fb:c4:03:d2:a4:de:17:e6:
86:e6:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:53 2025 by rpki-client