Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: 8BxUi+73hDqo7zJkhr9mINpW/SuhHMXSYzSWrwtK+hM=
Subject key identifier: C0:B5:5E:94:01:DE:3B:57:44:2E:72:EB:95:43:3D:9B:14:D7:B5:40
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 01976BBCBF3B77C7A7959E708925C55F6CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0FF3
Signing time: Sat 14 Jun 2025 00:00:21 +0000
Manifest this update: Sat 14 Jun 2025 00:00:21 +0000
Manifest next update: Sun 15 Jun 2025 00:00:21 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: vliArfNGl6dY70k9Yhw5h1RTbY4U4H4XQPkIY7hMqog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:bf:3b:77:c7:a7:95:9e:70:89:25:c5:5f:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jun 14 00:00:21 2025 GMT
Not After : Jun 15 00:00:21 2025 GMT
Subject: CN=c0b55e9401de3b57442e72eb95433d9b14d7b540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:e0:69:02:51:9d:27:36:58:81:34:31:87:
07:8d:8c:e4:2e:42:99:58:d2:53:34:d0:cf:8f:8e:
0d:df:fd:3c:13:73:e1:ed:76:ba:33:ff:92:72:70:
42:75:79:f3:b0:d9:09:02:8b:08:4f:1c:b1:63:c5:
f8:07:47:e1:74:ab:f4:9b:d9:e0:9a:c0:71:1c:48:
0b:66:28:6e:ba:92:09:a9:c2:cb:ef:24:9f:fd:91:
77:da:66:15:24:f6:3d:20:0b:b7:11:1f:3b:78:b5:
6c:75:c2:bb:dd:7e:90:c0:72:58:60:87:9e:77:4e:
4b:87:e7:10:e1:d3:55:4e:34:28:1b:85:5a:93:51:
e6:3c:63:f9:a7:47:7f:0d:d3:86:e4:86:59:d6:d1:
52:8c:81:04:08:f9:47:d3:73:68:22:03:62:88:d5:
e2:7a:af:b3:17:e0:b5:e6:6a:d4:58:d4:64:2d:f5:
a6:33:fa:09:1e:df:c9:57:07:70:9f:ea:06:93:1e:
31:0b:f2:ef:8c:c9:26:8a:54:06:04:ed:8d:ed:59:
ac:da:ff:9d:ef:fb:7c:f0:5c:25:99:e5:5c:fd:c5:
31:f6:0a:b0:85:02:3f:92:19:0e:fe:c0:a7:35:3b:
92:09:49:ed:c0:42:9e:fc:2d:a0:a5:e8:f5:bf:08:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:5E:94:01:DE:3B:57:44:2E:72:EB:95:43:3D:9B:14:D7:B5:40
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:36:a2:01:1c:6d:d2:24:87:81:c7:96:56:d4:d5:81:b2:
35:c1:c9:e2:75:e8:81:1e:cd:0a:2f:00:74:ee:c7:c9:22:4b:
82:18:e0:7a:45:01:8f:63:0e:16:a5:99:67:a4:8c:07:6d:ef:
0d:de:51:d2:fa:a5:30:4b:c9:45:cb:95:d3:d0:33:61:18:91:
2b:fd:d2:b3:67:44:d5:7f:35:d1:f6:f2:4e:67:09:bf:a0:2c:
c5:63:55:ec:11:87:3a:19:36:1e:fe:ac:a4:3d:8a:b2:e3:95:
29:87:49:b9:3d:6a:1b:cd:a9:7d:13:82:30:c2:cf:bb:60:c4:
68:38:76:85:53:bb:9b:36:84:0c:c0:23:d8:cb:74:1d:21:ea:
30:5c:11:58:16:b7:b1:17:db:a5:12:6a:ac:51:5c:cf:bd:a0:
27:90:2d:f5:68:11:52:e7:99:08:6b:14:b0:4b:f0:44:5f:08:
69:e1:fa:c3:b0:12:9b:e4:f0:0c:85:72:f5:c5:d7:3a:0d:fa:
44:15:d7:4c:14:3e:e7:ac:ed:4b:42:f9:aa:a4:f0:69:b4:06:
d7:89:d0:d1:1e:3d:41:49:6d:b9:06:42:da:a2:90:d4:94:5c:
96:f5:a3:89:0d:cf:b9:5c:16:8d:59:3e:ee:ef:04:80:db:f6:
5d:8e:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:00 2025 by rpki-client