Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: OavVCdrCx+0slpC+g7IeZovFwJFDqAvyitUyECKHzyw=
Subject key identifier: 5E:60:54:5F:34:D9:B4:B2:11:0E:EB:5A:89:4E:B5:64:C1:44:AD:B0
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019752D8C5DE64652311CBA6DA2E28CFA91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 12BE
Signing time: Mon 09 Jun 2025 04:00:27 +0000
Manifest this update: Mon 09 Jun 2025 04:00:27 +0000
Manifest next update: Tue 10 Jun 2025 04:00:27 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: Fpa4PNIV19NgRc20FSypjXJsOihe5Nw2cXX5PaiKzUo=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:c5:de:64:65:23:11:cb:a6:da:2e:28:cf:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Jun 9 04:00:27 2025 GMT
Not After : Jun 10 04:00:27 2025 GMT
Subject: CN=5e60545f34d9b4b2110eeb5a894eb564c144adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:ac:49:b5:7e:22:ce:42:1f:90:2d:0f:37:
c5:25:b8:d6:f3:2e:de:96:cf:fb:2c:21:5a:37:95:
92:6c:ed:18:46:3a:6a:c3:95:d7:db:0b:7c:67:08:
82:90:9a:91:3c:bf:9e:e4:08:55:91:ed:75:6d:b2:
eb:ee:65:38:fd:4b:3a:a3:39:96:4f:d0:0a:70:e7:
12:46:f9:2e:ab:47:37:44:d0:9c:48:cb:e9:1b:88:
ab:db:e7:72:4a:b3:88:07:97:27:df:cd:57:7e:69:
90:9f:3e:90:c7:32:0b:fa:c0:9e:ca:92:1c:60:03:
a6:9d:f2:ef:3a:d5:81:1e:e9:b2:0d:b3:50:9c:3f:
eb:e0:dc:4d:2c:a9:5f:ae:a8:4d:f4:f5:48:64:5c:
80:3c:f8:c0:c0:07:2d:86:e0:2a:9e:1b:8f:9a:84:
6a:3f:e8:d1:df:2f:a8:23:54:af:04:ca:c4:b9:65:
33:2a:c8:b4:ef:01:65:92:3d:ae:a3:19:e3:d1:5b:
77:bd:e8:20:77:16:9c:08:ae:af:96:17:1a:c8:5f:
ce:35:4b:45:e1:26:81:3c:06:e7:52:59:2e:ea:36:
f4:9a:9c:8d:1e:af:4b:96:b0:7d:f2:ba:a3:0c:a4:
b6:23:50:c6:fc:76:bb:1f:31:5d:8b:9c:c7:4d:95:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:54:5F:34:D9:B4:B2:11:0E:EB:5A:89:4E:B5:64:C1:44:AD:B0
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:7b:ad:0f:28:17:dd:73:50:7e:a5:ec:bd:c0:36:ce:64:
5f:bd:64:80:bf:30:11:dd:e0:f2:3f:62:45:dc:41:d7:ee:d5:
f5:96:b9:19:ab:6b:31:ee:4f:d0:c7:dd:8d:67:08:b1:32:aa:
9f:a7:d1:73:6a:0c:15:8a:af:6f:0c:3e:fe:a2:81:c5:0f:66:
98:b4:bd:4a:bb:43:d5:f0:d9:78:b9:0f:92:4e:01:54:a4:1e:
cc:cf:58:d6:7b:30:b3:0a:3d:90:0d:27:d3:fe:02:b5:02:61:
92:bc:59:23:29:e6:74:b2:f4:3e:4c:c4:6a:47:80:71:9d:28:
ac:6e:e3:17:ed:83:01:1b:cf:83:62:4b:b8:09:2a:14:0a:b5:
8c:a3:06:24:a2:2c:92:71:4f:66:f4:a4:15:68:8e:25:ce:41:
b4:4c:0d:63:f3:1e:ed:1a:02:72:a4:74:14:67:63:71:21:48:
e2:a7:5e:32:2d:78:69:70:36:4f:a0:a7:d9:fe:60:b2:37:ac:
c2:6f:6b:d2:67:df:fa:f4:6b:1e:7c:76:ba:c4:14:d5:f1:c8:
b6:4b:79:83:ff:90:c1:df:e9:47:d2:ae:e3:c5:cb:38:57:a8:
1f:35:97:c9:28:ef:71:e4:e7:f0:fe:2e:97:b3:25:a1:e9:8c:
c6:44:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:42 2025 by rpki-client