Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: Yo/JWs0RTJPt3bUbhb92/8isPOEHOdktpeAEpkEIr7w=
Subject key identifier: 4C:37:7D:4C:90:8A:67:1A:BF:09:4E:7B:8D:7A:FE:07:4B:1D:86:F5
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01977E9EE23F5944B0150DD2FC9A2F68E8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0AB8
Signing time: Tue 17 Jun 2025 16:00:31 +0000
Manifest this update: Tue 17 Jun 2025 16:00:31 +0000
Manifest next update: Wed 18 Jun 2025 16:00:31 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: KGadY96xP8CbDoFD3E4b6zaGaRJKmtfNxZueM9csPEM=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:e2:3f:59:44:b0:15:0d:d2:fc:9a:2f:68:e8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jun 17 16:00:31 2025 GMT
Not After : Jun 18 16:00:31 2025 GMT
Subject: CN=4c377d4c908a671abf094e7b8d7afe074b1d86f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:a6:f5:84:e6:18:bd:6f:cc:35:5b:91:73:
01:1b:3a:dd:25:21:db:0b:8d:3b:04:d5:fe:f0:68:
36:b5:a0:08:30:cb:d4:51:28:09:98:28:1b:39:3c:
70:ab:e4:51:9b:2a:9c:9d:a4:08:b3:a1:8d:b8:8a:
38:13:a1:33:ae:1d:05:e0:22:5f:a6:00:26:ad:79:
8f:59:0e:3e:71:ac:61:b8:c6:3a:7a:98:9b:f2:c2:
fd:c7:a9:d3:00:4e:3c:1a:80:a5:69:78:e8:f8:4f:
a7:a6:d9:ab:46:cf:0f:8a:c0:7e:de:05:9d:a8:95:
32:16:86:c1:05:37:0f:a7:43:94:ab:c6:35:87:92:
b8:69:57:16:34:96:98:ca:21:96:54:b4:90:d1:04:
fe:ac:6f:17:e1:cf:c8:cd:99:3e:d4:56:d4:f9:cb:
88:25:b4:15:8a:b3:67:47:e8:29:bd:ef:df:cc:bd:
29:75:80:15:0f:c9:55:cb:70:3b:42:16:8d:c4:08:
4f:53:5d:6f:2c:43:f4:0c:4e:69:19:59:1b:71:6e:
eb:46:75:82:c5:b1:ef:37:bb:ab:09:02:0f:4b:47:
c5:0d:1e:87:9a:d4:1f:64:8e:e9:51:e2:9d:13:c5:
3e:af:06:b8:a3:9d:c6:c7:cc:fb:4a:5f:3a:44:1e:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:7D:4C:90:8A:67:1A:BF:09:4E:7B:8D:7A:FE:07:4B:1D:86:F5
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:64:85:2f:f7:3b:e5:2f:41:aa:84:99:d9:96:43:5f:85:
0b:5c:5c:7f:3b:c6:d7:b8:2c:a7:62:36:13:4e:9b:55:15:f2:
a5:11:51:6c:cb:5d:ea:f6:e7:b1:30:85:c1:e0:2b:af:a3:84:
23:dd:67:b5:06:01:76:59:66:0b:23:42:85:60:cd:64:73:72:
9f:fd:d1:9a:c0:81:7d:ae:90:c9:2c:3c:2b:0b:cd:8b:22:b2:
9f:a5:da:9c:8b:76:e3:b0:b9:50:b8:c4:48:66:13:1e:71:b8:
26:ed:3d:82:77:f3:65:00:9f:8e:8a:9f:62:22:50:1b:b4:af:
c9:42:06:7c:ec:0d:31:1f:21:25:b0:e7:e6:9a:1e:ed:22:33:
f7:15:e3:6d:48:4e:82:20:d7:b9:ab:d8:cd:12:41:a8:86:3e:
ce:44:2b:1e:00:ad:85:b3:68:dd:fb:61:45:77:16:48:36:8e:
4b:3f:3d:9e:d7:fc:c6:7b:13:e5:fd:33:a5:54:d8:29:ab:81:
60:e4:90:df:d9:00:58:d6:2f:87:8a:32:32:ce:af:f8:5b:ec:
03:fa:38:a5:31:b2:d4:9c:52:4c:f5:2d:47:05:5c:27:c6:e8:
2c:fb:1b:5c:31:4a:1e:f5:b4:b0:6c:69:da:24:2e:be:5f:ed:
dd:be:bd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:58:48 2025 by rpki-client