Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: 2812xpTTRRqEBG9SeoVBNH5J+cX6AOSxocgwOSPn2YI=
Subject key identifier: 9B:29:13:A3:DD:33:FB:51:22:51:31:8D:B5:E3:12:17:CE:52:F6:1E
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 01976C2B483B1033526C50325B629A581838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 12E3
Signing time: Sat 14 Jun 2025 02:01:05 +0000
Manifest this update: Sat 14 Jun 2025 02:01:05 +0000
Manifest next update: Sun 15 Jun 2025 02:01:05 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: vAot4HmzzZZGcAl8P1Gt11roxi3AiFuGSiP7QKofRNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:48:3b:10:33:52:6c:50:32:5b:62:9a:58:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jun 14 02:01:05 2025 GMT
Not After : Jun 15 02:01:05 2025 GMT
Subject: CN=9b2913a3dd33fb512251318db5e31217ce52f61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:f2:d6:5f:df:96:e5:5a:3c:e4:c6:5c:8e:
07:86:40:c2:ec:43:fe:53:7c:b4:6b:6d:d8:d3:d2:
8c:69:9d:75:46:76:df:ba:01:f2:4c:03:18:51:a1:
05:6a:8e:17:a1:69:eb:08:75:05:1e:5f:27:0e:6c:
8d:7e:69:b3:9d:f0:35:64:fa:9e:53:2c:41:08:bc:
b9:be:58:44:09:97:46:99:6e:e5:51:ce:67:ee:9b:
e4:5e:48:95:26:e5:bf:9f:a0:e4:94:f1:47:02:96:
a5:f5:a6:f8:55:09:3a:41:aa:ed:e1:29:4b:5d:be:
21:f0:47:5d:dd:1a:40:5b:e5:fd:a1:59:ae:b1:51:
c0:a6:d9:6e:50:c3:21:c7:52:f5:d3:89:ca:7b:31:
a9:23:ec:e7:a8:bc:9c:ea:76:ca:d9:e2:41:83:86:
67:e3:d5:02:d3:79:83:c7:3e:df:95:cc:5b:f9:1b:
cc:ff:a9:10:65:68:6c:03:3d:d3:ae:60:c6:4e:11:
dd:a3:83:6f:5e:a1:0b:eb:6e:20:ba:6d:e8:6e:7e:
21:35:12:47:07:6d:a6:a2:cc:a5:73:73:ce:12:8d:
8c:1c:26:b2:e5:13:2c:26:88:f5:28:4c:87:dc:98:
65:3b:64:1e:aa:5e:b4:35:c4:d7:09:5c:2b:d0:73:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:29:13:A3:DD:33:FB:51:22:51:31:8D:B5:E3:12:17:CE:52:F6:1E
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:af:d9:66:99:de:3b:a5:5b:3c:8c:48:1a:91:4c:8f:b1:
82:a7:58:89:e3:69:f1:a6:f6:4d:aa:21:d2:dd:5f:f2:15:18:
06:09:89:85:82:56:e2:28:dc:fd:3a:73:25:1b:bb:af:eb:2b:
38:7b:9c:c7:d0:31:64:5f:99:46:a3:7e:f3:a0:21:2e:66:07:
46:e9:60:c7:f0:c7:8e:55:a8:55:cc:0a:c9:2b:5b:b3:6d:2d:
61:e1:10:cf:7f:42:8b:99:2b:06:ed:58:1a:4b:ff:51:ca:a2:
47:93:29:99:6e:42:4e:66:a3:76:50:50:ba:f4:a2:3f:66:e9:
ff:cb:de:73:07:5f:93:01:16:b4:44:09:d5:8c:b8:8b:9f:e7:
fe:c2:44:e0:14:80:e7:bb:d3:57:a3:10:4f:58:9a:50:e9:6b:
36:34:94:df:70:e2:ad:94:32:4c:4e:32:f0:e7:89:0d:12:b6:
dc:8c:59:31:20:16:cd:4b:83:8d:fb:12:27:84:ac:f0:4e:53:
e4:73:cd:15:31:b1:0a:a0:fc:59:cc:1e:0e:ed:8f:8f:8e:21:
25:5e:3b:60:36:9d:d5:b1:ee:00:e6:57:b0:5d:de:7a:1c:b6:
e6:39:c0:ec:ff:b8:a9:13:6c:fd:7d:8f:c8:13:ed:7c:3a:eb:
df:e2:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:22 2025 by rpki-client