Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: lYL3rfNCJJ3csWdTfWfvarAfSCJ/hnjQLRVTlUfNaDs=
Subject key identifier: 24:DD:F8:14:F8:11:3E:95:52:A7:7D:A2:5A:2C:FE:5F:A3:F8:94:0E
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 0197542294FB4B38A633B1077D5FA517A096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0E5E
Signing time: Mon 09 Jun 2025 10:00:41 +0000
Manifest this update: Mon 09 Jun 2025 10:00:41 +0000
Manifest next update: Tue 10 Jun 2025 10:00:41 +0000
Files and hashes: 1: AHAEcpQC5M7HA3lpCyAUPO_2dfI.roa (hash: QyNnsqD7JTUcYd/+hLfrA6pGFz4v5bZK87dfCrHLd18=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: RksHKCPWlFWe0PUboHJuSNiQh5ZCWWgKYmdamv0zqbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:94:fb:4b:38:a6:33:b1:07:7d:5f:a5:17:a0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Jun 9 10:00:41 2025 GMT
Not After : Jun 10 10:00:41 2025 GMT
Subject: CN=24ddf814f8113e9552a77da25a2cfe5fa3f8940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:8b:69:aa:5d:40:1b:58:8a:56:fd:72:9e:
89:c6:19:e5:fa:7a:74:b0:af:c0:96:be:7f:ca:38:
84:3c:91:2c:18:89:4f:7f:1f:e4:c6:1f:9d:65:79:
4f:68:be:65:64:9c:9c:1c:17:0d:9e:de:08:ba:b6:
4e:7b:f7:6a:94:60:48:ac:ff:8d:8c:f9:14:6f:18:
fe:4f:4f:d1:ea:4a:ce:9a:84:08:f8:d4:b3:94:2e:
46:b3:97:91:39:e1:38:82:36:7e:d6:14:51:a6:4c:
a7:b1:62:d2:d3:3c:93:c8:20:fa:5e:fa:4e:f2:86:
c9:42:fb:83:86:e7:33:37:8d:c9:fa:71:e1:60:85:
6d:60:b4:0d:04:83:20:a1:bc:8c:11:80:37:82:7f:
97:a3:d5:4e:03:35:f6:fb:e2:81:3e:6e:72:f2:b2:
c3:d0:c7:85:66:d5:01:56:fb:ed:a8:4b:b5:66:62:
28:fb:06:b5:7e:b0:28:7e:d2:2e:96:f8:72:c1:7f:
1f:f4:9f:5d:a9:5d:c4:95:24:d6:7d:a0:47:81:f4:
40:b6:60:c6:c9:ea:e7:99:9e:75:c3:9c:cd:2e:35:
64:c9:61:63:b2:77:49:f4:d4:41:a7:70:53:53:dc:
f7:22:9b:55:44:ae:7c:bb:22:3f:6b:79:82:97:e4:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:F8:14:F8:11:3E:95:52:A7:7D:A2:5A:2C:FE:5F:A3:F8:94:0E
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:53:c6:58:76:f1:03:1d:b8:dd:01:fb:6a:5e:03:96:bc:
36:e6:ce:d9:fe:fe:70:d6:53:47:db:56:1a:c9:99:8b:86:b2:
ec:cf:59:ac:e0:53:1a:f1:5e:19:57:09:0f:c7:30:61:b5:a0:
13:08:39:6c:8c:70:10:ac:be:2d:e9:b1:ba:28:58:3f:aa:66:
64:bc:f4:e9:c7:3a:8f:6b:61:cd:dc:c3:82:99:27:d9:fe:19:
c9:f4:63:fe:a7:cd:c2:9e:48:a7:19:6f:4d:16:1a:8d:81:a8:
06:68:c6:98:19:30:b4:a7:d8:a2:f7:83:ea:28:ff:81:36:bb:
d9:a3:02:9d:3a:ee:68:a7:74:cf:d8:0c:05:fb:82:de:d7:87:
e5:20:e6:7e:2b:3b:bb:7a:a9:d9:a7:f7:62:8d:d6:bc:2c:a8:
c7:ce:47:53:5d:c5:87:dc:4c:16:5c:a8:20:bc:2f:14:93:74:
c2:24:87:ee:b9:7a:dd:2c:c3:29:de:2e:55:05:c6:d2:6c:fb:
36:67:6e:00:c7:33:c4:c0:6b:e9:b6:92:0d:f0:3d:fd:7a:9d:
9d:98:79:45:39:88:cb:c8:53:e4:2c:46:2d:79:65:32:2d:81:
97:32:6d:ef:cd:da:8d:a0:d8:15:b1:e1:a6:70:26:63:81:95:
33:5f:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:29:32 2025 by rpki-client