Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: 8ulJ5flFrMDuSHqp8k/Fd0SLyKjWBadswUFQEB5gqYk=
Subject key identifier: B1:08:A8:F3:47:6B:98:2D:D9:94:C2:2B:4C:B7:2E:EC:D0:B6:0B:11
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019763961D5DFDF32B1007BC8C9A0AE9C03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0E66
Signing time: Thu 12 Jun 2025 10:01:11 +0000
Manifest this update: Thu 12 Jun 2025 10:01:11 +0000
Manifest next update: Fri 13 Jun 2025 10:01:11 +0000
Files and hashes: 1: AHAEcpQC5M7HA3lpCyAUPO_2dfI.roa (hash: QyNnsqD7JTUcYd/+hLfrA6pGFz4v5bZK87dfCrHLd18=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: 6n8gCRswnZtUJTEW1XGXU9wtUIyMBQ5zEomecVFZI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:1d:5d:fd:f3:2b:10:07:bc:8c:9a:0a:e9:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Jun 12 10:01:11 2025 GMT
Not After : Jun 13 10:01:11 2025 GMT
Subject: CN=b108a8f3476b982dd994c22b4cb72eecd0b60b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:ed:f3:32:57:8a:ab:e2:11:73:85:9e:6f:
01:72:53:fd:2e:0e:94:6e:12:93:1a:13:bd:bf:fe:
07:3e:14:a7:1a:cc:ee:8c:c8:8d:f2:f0:ab:f1:f1:
2e:46:0e:84:bc:98:2b:4e:7c:62:c8:63:1d:aa:e2:
5b:a7:32:d2:cd:4c:e3:65:7a:dc:59:74:4f:63:88:
27:fd:c2:b0:2d:18:fa:00:77:58:14:f4:1a:c5:4d:
6a:29:53:1c:55:ec:f9:4c:ce:4f:85:91:35:aa:b2:
e5:31:64:c9:97:b2:99:8b:f0:d1:9d:2c:f2:97:dd:
56:58:93:cb:6c:c4:dd:7f:07:f7:ad:83:1a:a9:f2:
7d:ad:13:65:c3:af:38:7c:f4:30:60:ff:04:df:4e:
0c:0e:2a:d0:25:7e:62:53:1d:2e:9f:6e:e7:86:dd:
df:0a:fe:e8:1c:44:c6:1f:91:90:07:1c:af:53:67:
bc:ce:f8:cc:c0:38:87:99:35:79:49:31:c9:42:5a:
66:03:75:fa:62:ab:66:7d:fe:df:72:fb:1c:f0:62:
4e:9d:d5:11:6e:dc:a7:2a:70:58:49:4c:1c:25:9b:
9a:d8:5e:8e:1a:50:73:35:5c:a7:56:f0:b9:6b:ec:
7e:ea:7d:1d:a2:43:06:c7:9d:85:3c:85:08:4a:06:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:A8:F3:47:6B:98:2D:D9:94:C2:2B:4C:B7:2E:EC:D0:B6:0B:11
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:15:91:ad:16:e8:02:4f:64:bb:3c:ef:1a:7b:22:0a:e8:a2:
bd:78:9c:73:a0:67:04:39:15:9f:5d:10:59:b3:2e:2d:0d:6c:
84:d5:a1:20:eb:50:09:48:e0:0b:f9:81:61:03:1a:4e:c2:a5:
87:15:5b:a9:9a:db:ec:33:12:81:1c:b1:53:65:4f:98:dd:4d:
43:05:19:dc:7e:a9:af:f5:e7:97:ca:a3:d8:b4:2f:6b:44:8f:
84:bc:af:2e:d0:15:ce:cc:af:e9:86:55:ec:2a:2a:45:99:00:
fc:c3:04:d3:26:a8:42:a1:bb:9f:2d:e6:d6:82:2f:86:74:10:
38:55:d6:05:2d:b5:57:9f:5b:eb:96:ee:b0:0d:45:31:b2:96:
56:40:e5:8d:a2:75:89:29:e3:aa:eb:8a:17:a9:e9:7e:6d:79:
71:63:2f:38:1a:06:a1:71:67:28:d9:07:df:60:59:f6:89:02:
b4:c4:62:fe:71:ce:c4:65:1e:25:e8:9b:e5:1f:1f:49:49:13:
d8:a8:04:56:06:5e:ff:f9:aa:a5:92:93:ac:16:b2:10:75:5a:
d8:03:83:c4:f6:3e:cb:42:e6:b5:59:3b:7e:d3:04:17:05:ce:
49:cb:56:bf:f2:9f:e8:9c:d9:04:c6:2e:da:5a:c4:aa:ef:cf:
42:f6:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:04:25 2025 by rpki-client