Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: bMrmGMj0b+zC0A2Fj7fWjyfPpVmi+pkI8pQG5qzm4RQ=
Subject key identifier: 4A:D1:66:AE:20:EA:2B:77:59:11:FF:41:66:30:9C:61:12:4D:4A:B0
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 01974DB2AB08260E48202491160427709D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 05DE
Signing time: Sun 08 Jun 2025 04:00:44 +0000
Manifest this update: Sun 08 Jun 2025 04:00:44 +0000
Manifest next update: Mon 09 Jun 2025 04:00:44 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: 8dZafRoFrTO/CAm7NhkFLwZioHlTOCY38g+jpWg1hSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ab:08:26:0e:48:20:24:91:16:04:27:70:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Jun 8 04:00:44 2025 GMT
Not After : Jun 9 04:00:44 2025 GMT
Subject: CN=4ad166ae20ea2b775911ff4166309c61124d4ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:37:16:86:39:05:12:b7:84:61:ee:ae:6f:
00:4d:f6:de:2d:96:f1:23:3c:cb:79:82:3c:58:a4:
72:07:db:3b:24:90:6d:58:23:56:b2:c9:26:e9:dc:
c7:b0:a1:c3:64:6e:e0:05:e4:f9:d4:ee:c5:b4:88:
0e:dc:f5:ce:7d:91:7a:0c:ce:eb:ab:ab:16:7e:76:
79:aa:a8:0c:f9:af:b0:19:be:0c:75:2d:ab:c3:01:
ca:74:15:ed:cf:67:28:52:07:43:52:b2:92:b3:71:
6a:c3:67:f4:ad:b5:14:95:ad:c2:db:5c:46:dc:72:
b9:6d:d2:3c:a2:e9:a6:06:92:9c:3f:32:8e:6b:23:
f4:99:81:8a:4c:af:2b:de:f7:ac:4b:f2:03:86:fb:
82:17:27:41:e5:e3:72:8c:71:cb:f9:bc:82:7e:de:
4e:cc:8f:a7:96:2b:61:d2:41:22:58:92:83:2c:26:
39:46:c4:8b:d7:c5:5c:3a:b0:70:fe:12:b8:e6:76:
09:fa:11:48:a2:0d:5e:60:13:2a:3b:43:2c:69:ee:
36:65:c7:9c:30:7a:d7:49:18:79:58:a3:34:6c:b8:
3b:48:8d:a8:0d:1a:1b:72:db:ee:ad:53:50:a4:0a:
47:07:80:16:ee:bc:ff:a5:e6:ee:0c:c8:e1:89:de:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:66:AE:20:EA:2B:77:59:11:FF:41:66:30:9C:61:12:4D:4A:B0
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9f:54:f0:7c:dd:11:a6:9c:9e:eb:7b:e7:71:29:84:f7:45:
26:a8:34:ba:61:99:7a:b2:6e:db:9d:b2:13:57:34:52:31:7b:
05:d0:12:67:cc:5c:e6:b3:16:90:a8:49:4c:a8:88:5f:2b:80:
81:6e:74:4e:50:52:a1:0a:f0:ca:71:b3:49:14:39:8b:38:e3:
e1:99:6d:97:9c:8d:2e:43:a5:9e:0a:10:4a:57:79:78:85:df:
1b:94:20:4a:43:6e:a7:03:05:a6:a0:d8:c9:18:ba:06:5e:f6:
dc:8d:e9:03:e8:04:12:da:de:29:61:31:a9:a5:de:0c:64:32:
6e:95:70:6c:40:d3:c9:62:85:90:47:77:ff:c1:b3:8b:bf:ad:
58:a0:d9:7f:17:d9:6f:d4:74:23:9d:bb:79:e0:6c:2b:5f:8d:
a9:7c:2c:92:db:d9:dc:46:13:5f:5c:11:20:b1:5a:23:38:4a:
82:a2:d9:99:ff:c2:6c:ed:0f:59:c9:27:28:38:61:51:59:20:
8a:8c:46:d3:49:64:55:cc:00:05:62:ec:a5:fd:1b:f7:c5:0c:
08:45:8d:4b:ba:52:f8:2d:ac:6c:26:2d:57:03:32:c9:88:33:
2c:fe:b9:60:2c:2c:07:85:f0:d3:6b:11:32:52:b6:76:7c:a1:
d2:6f:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:19:29 2025 by rpki-client