Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: LLrr4y1iOhnhGnXlt4QPOOXiiI/E0Mt6Fzplsbs+otE=
Subject key identifier: 49:C4:8E:E8:7C:EB:36:50:51:36:62:A8:68:93:99:2C:8A:EA:3A:31
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019776AE965D8EB273E6FC0B197AE4DDE1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 02EB
Signing time: Mon 16 Jun 2025 03:00:42 +0000
Manifest this update: Mon 16 Jun 2025 03:00:42 +0000
Manifest next update: Tue 17 Jun 2025 03:00:42 +0000
Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: xc/O1aRuNxdFIcxRn4YNCIPfXs0o9YCh0Z+yv8iP0js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:96:5d:8e:b2:73:e6:fc:0b:19:7a:e4:dd:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jun 16 03:00:42 2025 GMT
Not After : Jun 17 03:00:42 2025 GMT
Subject: CN=49c48ee87ceb3650513662a86893992c8aea3a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:cb:de:8d:ac:71:d5:7d:91:e8:c3:27:9f:
04:c4:be:4f:a3:a9:21:af:40:bb:77:d8:7b:34:e9:
0a:ce:46:1e:a1:4d:ab:ae:4a:4b:43:4a:59:91:77:
fb:0a:b5:fb:51:08:55:d1:e7:23:0b:81:98:5c:e7:
6f:d6:f7:c8:c3:d2:c1:ae:25:5f:3e:52:7c:39:11:
a4:ef:f7:b0:88:cb:28:3e:4f:7f:88:74:57:22:e1:
ba:f3:75:96:ff:76:89:97:96:71:7e:91:87:50:32:
cb:36:80:c3:d5:c8:b7:99:6d:75:00:60:00:a9:53:
67:a9:4c:62:dd:39:bf:6e:a1:1e:ed:25:89:1a:e7:
6b:29:ef:1c:5b:c1:c1:ac:c3:fc:6c:50:35:b7:74:
99:8f:bf:66:36:71:b2:df:a8:55:1d:b3:87:39:24:
6c:fe:7e:e4:e1:ac:5a:9d:64:97:72:69:04:48:7a:
c2:e6:8a:2c:cf:fb:a6:31:9e:a3:85:c1:00:5a:f3:
32:3b:2d:ec:4b:0d:3b:64:b3:51:58:ca:6a:d9:9c:
28:22:b9:3c:a3:07:00:d9:43:bd:10:f8:ff:5c:18:
8b:7b:a2:36:d0:0f:b1:e9:8b:25:eb:05:16:58:c2:
55:f9:52:7c:fe:d9:2e:ee:9a:76:49:ba:69:a1:01:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:8E:E8:7C:EB:36:50:51:36:62:A8:68:93:99:2C:8A:EA:3A:31
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:02:44:fb:f2:49:a8:de:f9:3b:6a:ae:dd:52:d8:5e:f4:
fe:ea:0b:d5:e3:a1:e0:6a:82:01:da:e3:40:f9:fe:f8:cf:7f:
6c:ac:ac:ed:f4:51:4b:45:43:f5:55:13:d5:b1:3b:f3:a6:d6:
50:62:2b:7f:2e:27:9d:6f:06:22:bf:dd:ea:2e:4b:9e:2c:77:
16:0d:f5:ec:bc:b8:d2:a4:10:ff:df:22:79:35:45:ad:b3:12:
28:09:0f:98:fc:6e:cb:ca:27:66:30:35:4d:91:9f:bf:2d:a3:
3c:c5:1b:5a:35:3a:a6:14:09:7c:e2:4d:e5:f0:ea:4d:3a:8e:
65:47:05:cc:44:d6:65:6c:34:74:1b:c7:e2:26:62:16:58:0b:
1d:b1:d7:3a:fc:9d:fd:1b:25:44:2f:38:ff:e9:7c:a8:f0:d5:
af:8e:e2:5f:23:50:0b:6f:22:f9:8e:40:5b:e2:09:59:4d:3d:
27:5e:15:91:6e:ae:0c:a4:ec:b5:60:8c:85:cd:49:00:f2:6a:
5f:bf:a5:45:1e:16:c4:5e:42:c1:5b:3d:02:5d:7b:84:2c:ff:
69:7e:4b:5f:ad:ee:35:db:85:cc:bd:76:f3:43:a5:6b:4a:ee:
9f:13:7e:53:97:8b:40:fe:37:f0:7c:50:f4:92:ff:79:9b:d6:
b5:f6:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:30 2025 by rpki-client