Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: gyuSqMY7RRlYdA1EvAG+5YeAv+SwSnpTHLN4tUHHI5I=
Subject key identifier: 5A:A4:42:C8:58:CE:4F:09:25:25:31:20:32:9F:18:B1:58:CF:CB:70
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019748C3539EFB2E434F2EB5754B08F3A867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0B6A
Signing time: Sat 07 Jun 2025 05:00:49 +0000
Manifest this update: Sat 07 Jun 2025 05:00:49 +0000
Manifest next update: Sun 08 Jun 2025 05:00:49 +0000
Files and hashes: 1: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: HepOBjEsUCvfLtJ1Q94jlsPXCMhzW4xevThA+flopB8=)
2: eEe-w2donDCxX-tAzaEpFb0UtVY.roa (hash: g2d5FELl0EWl1pKF09WRuqqNzRt0N8/ZzyiwDHce4Xk=)
3: kA_OSzYdIA2vmO2YYor5kHVNHTQ.roa (hash: na+fNS4+KPnZVKtvI9VPkmEDxvmlZJBhohUxDwUJWbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:53:9e:fb:2e:43:4f:2e:b5:75:4b:08:f3:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Jun 7 05:00:49 2025 GMT
Not After : Jun 8 05:00:49 2025 GMT
Subject: CN=5aa442c858ce4f0925253120329f18b158cfcb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:30:61:d7:fb:6a:1a:aa:d4:1b:0a:67:a1:
41:67:24:db:9a:9b:5f:f9:26:6a:45:fc:85:60:43:
97:f5:73:d3:4a:1a:4f:d2:9e:ab:31:7c:96:fb:be:
96:86:a0:95:0f:bb:3d:36:ba:81:39:e7:a8:e1:c6:
ff:e4:8e:ec:bf:ea:4c:9d:b0:75:3e:61:c0:fc:9f:
30:69:48:61:20:5e:65:06:b9:20:62:14:a5:66:9b:
4c:1e:d6:52:af:6a:19:30:ca:3f:ad:d3:e1:a4:20:
72:16:89:53:51:c7:c2:9d:98:91:35:92:c2:0c:a5:
0c:a0:71:86:62:bd:e8:36:37:99:83:40:48:be:7b:
37:d9:74:91:45:89:a8:ef:db:d9:f9:04:1d:5b:38:
42:34:83:fa:64:48:00:a5:a3:f9:34:0c:a0:82:52:
5d:cb:1e:bd:4c:fa:9d:75:75:33:1a:e6:2c:0b:69:
c8:41:22:56:68:de:9c:12:64:25:96:bb:b3:8a:03:
14:1d:e1:19:73:70:24:da:74:e9:e6:6d:23:d0:22:
03:ce:6e:d9:ee:d1:65:93:dd:6e:90:38:d2:10:d3:
84:3e:bb:7a:fc:86:bb:53:3c:c0:9b:08:a8:c5:1f:
26:10:92:69:72:61:e0:54:65:a4:ed:df:82:0b:0e:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:42:C8:58:CE:4F:09:25:25:31:20:32:9F:18:B1:58:CF:CB:70
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:8a:10:10:c4:09:83:88:84:5e:31:17:69:d9:c5:92:9f:
b8:ff:10:ad:27:97:5b:ed:31:81:6c:49:02:e6:ff:27:61:72:
2b:ad:18:90:f5:21:ad:b4:46:3c:59:c2:cd:15:7d:f4:78:0d:
fb:bf:f4:3b:ee:eb:ad:bf:fc:18:eb:50:0e:95:cc:b0:64:15:
3b:f3:bc:2d:ea:be:a4:b4:03:4d:ae:f0:19:09:f1:99:b8:13:
ad:ad:2c:8a:ed:a9:05:96:5d:f7:80:af:9c:67:6b:3e:5a:ac:
6f:03:2f:49:f0:da:9e:d3:20:6e:28:06:f0:ca:15:5a:38:91:
fd:70:29:4b:27:ad:30:3d:4e:d9:d7:be:89:23:46:d2:f8:94:
22:3b:9c:5c:7d:98:0e:08:fa:73:3a:25:61:14:f9:df:88:ef:
cd:04:66:7c:13:1c:a5:cb:41:57:bd:5d:74:7e:c2:7e:90:8e:
5b:71:21:ce:43:5e:43:82:0f:7c:11:36:54:eb:a1:94:26:4d:
ce:c5:a8:e3:6c:0e:66:5c:5d:05:08:c9:a4:0f:0a:40:6a:d4:
85:b1:b3:8c:7e:f2:ad:9e:b2:41:18:e2:1f:1d:bd:39:6b:09:
d4:28:d2:4e:f6:da:a8:33:5a:21:a2:53:43:d2:0d:8c:e6:be:
a2:f0:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:17 2025 by rpki-client