Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
File: KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft (raw, json)
Hash identifier: 4PCZdMfuKEECAFXgnEXspCjMVbH2NxQC5AP20qjIhKE=
Subject key identifier: 58:C2:1A:C7:BA:DA:EF:03:C7:03:3F:5B:C9:11:AE:F1:BC:11:0C:A9
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 01974666B6A57A9E50A2E4CA8BEA2A12F2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
Manifest number: 0A61
Signing time: Fri 06 Jun 2025 18:00:25 +0000
Manifest this update: Fri 06 Jun 2025 18:00:25 +0000
Manifest next update: Sat 07 Jun 2025 18:00:25 +0000
Files and hashes: 1: 0i9Bsr9ABLnx3mgPWtu21_vME3g.roa (hash: TMrcqTSOi1Ov7CcLLSWohgeiaaCi8xEADwSrQIF/DCo=)
2: KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl (hash: 2y7bb2iKKhdRkE8jrpekTNGVoNKz4GjvSoWJjGuMvNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:b6:a5:7a:9e:50:a2:e4:ca:8b:ea:2a:12:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Jun 6 18:00:25 2025 GMT
Not After : Jun 7 18:00:25 2025 GMT
Subject: CN=58c21ac7badaef03c7033f5bc911aef1bc110ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:75:47:35:c4:73:e9:37:6f:e8:f2:ec:19:
90:19:fd:03:bb:b6:eb:f9:ca:aa:f7:50:9b:74:28:
5c:de:29:44:a8:7e:f2:f3:d5:8e:32:dc:74:57:69:
71:d2:d5:63:5d:3d:54:d3:f3:78:df:50:5a:f4:b5:
cf:0c:9d:6a:71:27:e7:2f:6e:ea:f8:eb:9d:30:73:
4a:80:4e:ca:15:b0:3c:1e:2c:7b:60:37:66:1d:5b:
c3:d9:8d:e2:cf:e7:df:f4:19:aa:10:c5:4e:61:2c:
c8:5f:f5:20:c7:06:a3:84:3f:b4:43:a3:50:88:46:
73:99:a1:66:62:51:11:aa:67:d6:19:6b:2c:d2:96:
aa:b7:f4:da:19:ab:f5:98:af:27:ac:4d:7a:8c:af:
bb:ba:da:0a:a3:ea:22:dd:11:6b:3a:ce:4e:df:77:
a7:3f:e5:0b:f5:6a:1f:95:19:15:58:20:03:6e:2f:
51:2f:58:c6:3b:ba:90:d2:3e:d0:94:8c:f9:7d:84:
b4:1c:84:e6:3a:86:14:5d:3a:d7:17:bd:92:ec:df:
e2:64:24:58:15:d0:74:2f:7f:c4:a5:14:7f:8d:9c:
de:30:3d:aa:0b:4c:d8:e9:f9:02:d2:3f:83:d2:c8:
4a:b4:65:00:a0:80:6c:21:f7:e4:88:9a:3c:2e:31:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C2:1A:C7:BA:DA:EF:03:C7:03:3F:5B:C9:11:AE:F1:BC:11:0C:A9
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:c0:01:81:14:85:84:6d:07:1c:5d:8c:c6:d3:b0:c9:24:
cc:78:6f:ed:c6:b6:29:e9:8a:b4:9d:db:35:6a:46:3a:aa:02:
a1:15:84:ef:02:77:47:ea:92:74:15:3d:80:ce:ae:1f:d2:52:
5c:c6:14:95:f9:a8:e3:19:98:15:33:5f:3b:ab:5c:c9:7b:50:
e6:3b:35:53:12:af:84:b3:ff:be:f7:96:ec:53:ea:35:e7:f0:
c0:6d:ec:15:d0:7c:0d:ed:6c:e7:d4:99:1d:f5:28:e7:c7:df:
8b:69:a7:02:8b:b2:02:15:89:c5:61:fd:68:86:7e:f8:3a:29:
78:9a:70:59:c6:2f:0f:33:a0:db:be:ff:2f:bb:e0:27:ea:4b:
0b:fb:75:ef:db:9d:af:5f:05:95:58:7a:e2:90:81:66:c5:47:
1b:e3:e8:41:d4:51:84:09:5a:8a:ab:4d:19:1a:1a:dc:f3:02:
7b:89:54:c0:c1:63:fb:2a:46:ba:9b:2b:3c:36:35:31:16:bf:
5d:99:f6:b9:57:6d:ee:bb:58:b3:48:fd:b2:74:9c:63:6a:73:
d4:f9:86:c7:51:bf:5d:2f:32:11:50:23:94:26:3a:44:59:28:
98:90:a9:b6:cd:fc:61:12:ab:e4:89:b8:b8:c5:db:23:cb:6f:
39:07:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:51 2025 by rpki-client