Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: +ELD2GB5GgYmDiIaAVjh0T5ImI/rX4wre1b0oaS0o8o=
Subject key identifier: E7:87:F6:0B:C3:1C:CF:FE:5F:67:B5:C6:14:05:72:7B:22:95:54:9B
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 01974A437E53FEB7B895511C7E7D555CE9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 12:00:26 +0000
Manifest this update: Sat 07 Jun 2025 12:00:26 +0000
Manifest next update: Sun 08 Jun 2025 12:00:26 +0000
Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: uNErW6M51oK9vgQjuijDgPWaSp8PNZ0PJ+tahCh53R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:7e:53:fe:b7:b8:95:51:1c:7e:7d:55:5c:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Jun 7 12:00:26 2025 GMT
Not After : Jun 8 12:00:26 2025 GMT
Subject: CN=e787f60bc31ccffe5f67b5c61405727b2295549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:7c:9a:50:b1:1b:09:14:36:7d:c0:a5:01:
1e:22:aa:e9:0f:1d:70:6d:57:91:58:44:4e:82:df:
53:bd:05:fd:16:0f:a6:23:c7:0d:46:2c:fe:af:da:
45:bc:4a:24:98:82:12:c7:c3:f9:9f:eb:ab:a8:81:
41:45:f2:31:3d:69:0a:32:43:37:46:3a:72:b7:72:
4a:d0:3b:31:3a:92:40:6a:c7:f0:bd:d6:c3:7a:b9:
68:e4:c3:79:c2:eb:c1:73:9c:36:35:5e:ef:e6:d2:
7f:5d:be:12:d9:ef:46:c9:9c:d9:fa:93:c1:74:15:
e0:13:6c:d0:a6:f2:66:52:b0:58:3f:39:3f:07:16:
23:21:31:ac:17:29:20:4f:d2:24:53:1a:93:79:40:
e6:e5:a8:eb:f3:73:1e:26:d3:48:4e:98:4b:f5:44:
5b:92:fb:7d:5c:85:33:cc:c2:9b:28:fa:84:15:5f:
f6:c6:43:45:47:b4:7f:bc:39:b0:90:48:77:47:b5:
28:a7:83:c8:20:00:40:b4:cd:b7:68:4b:ef:23:05:
99:71:3b:62:84:2c:e1:89:4d:82:c9:4f:2b:a6:4b:
02:77:bc:e3:ec:6a:10:05:e3:27:6b:7e:32:db:50:
3d:28:10:3e:1c:df:cd:bc:bb:f3:d1:e7:34:4b:60:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:F6:0B:C3:1C:CF:FE:5F:67:B5:C6:14:05:72:7B:22:95:54:9B
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:bc:a9:a9:aa:60:a1:78:d5:c8:7b:ee:9d:7f:24:79:46:
bc:2e:07:85:43:79:39:34:a9:52:3c:55:f2:01:ef:71:4a:ed:
57:06:8a:9c:69:59:3f:89:27:c5:0c:28:d4:ad:24:4d:6e:16:
67:76:8b:b5:33:21:77:ff:e9:59:49:3f:f2:0d:20:44:03:da:
2c:e9:f9:15:5c:fb:3a:1e:29:d3:18:e5:6e:20:19:d9:fa:97:
f4:ca:04:71:76:53:7d:5a:e6:88:a0:05:d7:95:e1:68:cf:7c:
3d:cb:3a:ce:17:cd:8c:55:46:bb:60:b0:5b:f7:75:28:41:c6:
76:e5:14:35:b1:d8:00:2f:93:96:3d:4e:03:1f:3a:2a:ee:b2:
43:94:82:d1:06:38:e8:28:4b:eb:a3:24:a4:f3:c6:2b:47:31:
2e:29:e4:cb:45:16:9e:19:91:2a:e1:e4:c6:15:04:de:47:f2:
e9:0a:1a:a6:d9:a9:a4:ee:2d:0e:a3:00:53:a4:92:73:84:b2:
fb:cf:2a:5d:05:cf:71:04:8b:af:12:13:fc:a5:b0:3e:bf:0a:
48:9d:3e:9b:02:0a:91:b8:70:a2:ab:2a:0c:8e:a1:76:d7:7a:
a7:df:e5:83:7b:3e:b2:af:f6:1c:97:85:9b:a0:74:ba:bb:d5:
c2:63:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:38 2025 by rpki-client