Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: w3Bffz3y5JtLKDq5TGxCLru7/nDnbb/t26+oveBJljU=
Subject key identifier: 43:45:4F:44:01:F6:BA:A7:1A:16:E5:64:BB:24:9C:DF:AC:34:3A:7F
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0197857C9B60E930D9EE6CA427B2175A62A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0D5B
Signing time: Thu 19 Jun 2025 00:00:25 +0000
Manifest this update: Thu 19 Jun 2025 00:00:25 +0000
Manifest next update: Fri 20 Jun 2025 00:00:25 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: 6MbJxfhwKpLIMVqLCRjY3gEP90H1lOV875v0aMjX6tU=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:7c:9b:60:e9:30:d9:ee:6c:a4:27:b2:17:5a:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jun 19 00:00:25 2025 GMT
Not After : Jun 20 00:00:25 2025 GMT
Subject: CN=43454f4401f6baa71a16e564bb249cdfac343a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:aa:77:d2:f6:c4:82:cd:d7:bc:cf:fd:66:
ba:08:b8:88:22:a4:2e:79:16:c5:e7:94:a2:b3:ff:
f2:53:48:5a:9a:c6:0a:ae:cd:87:65:79:1d:f4:7e:
8e:cb:27:ba:cb:22:c9:51:a1:a5:af:9e:ee:a6:d5:
bc:1e:39:89:8a:5f:e3:e8:70:37:18:02:ee:44:b3:
75:06:ef:ba:a0:a5:74:27:b5:b0:d6:53:b5:55:49:
cb:0e:55:9e:bb:78:3f:c6:d3:59:36:5c:45:1e:80:
cb:1b:ed:87:5c:99:a2:80:33:f1:75:25:cf:33:50:
b6:ad:25:7a:83:2d:d2:e8:8c:16:46:9f:02:ef:27:
95:14:1f:5d:74:2c:84:3a:ed:40:72:a0:2f:1e:60:
aa:7e:24:6b:2c:0d:e8:35:87:18:71:c2:c2:09:cf:
0a:e7:64:90:6d:4a:e8:ce:a7:0a:76:b4:28:44:43:
ac:89:3a:92:cd:02:d9:19:e8:91:90:3f:7b:c5:55:
3b:58:d0:f1:e0:ad:ae:3e:d1:32:a9:23:4c:08:0c:
45:09:9a:cf:9a:75:0c:d4:30:db:ae:dd:ba:23:da:
d0:64:ec:3d:29:c7:13:05:bb:fe:4a:71:1b:a2:27:
eb:da:ce:65:bf:2a:c0:77:73:7b:b4:74:aa:55:53:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:4F:44:01:F6:BA:A7:1A:16:E5:64:BB:24:9C:DF:AC:34:3A:7F
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:58:ef:b4:96:1e:9b:d7:44:d7:66:a8:87:36:49:e1:5d:a5:
bd:0d:c3:9d:ce:0f:11:d4:a7:42:18:c0:7e:0c:ba:7f:5f:0a:
bd:51:99:42:45:3e:57:42:be:f5:a6:46:16:56:fc:4b:8e:08:
b7:1a:4b:0a:1a:4d:2e:0f:2d:b5:ea:cc:0a:cb:2c:58:41:f6:
7b:0e:2f:da:80:ad:7e:c3:1e:05:c0:ff:9f:1d:a7:8f:3f:64:
ed:41:63:39:56:54:4c:29:b5:84:80:1f:85:9b:40:44:54:70:
71:af:a9:34:f2:af:3f:1b:1c:92:f3:a0:f9:ee:84:ff:03:68:
01:00:d4:f2:8d:b5:52:35:5e:e7:1c:cb:a2:f3:fd:8c:63:0d:
19:39:1c:6d:f7:f6:a7:09:7d:18:a8:44:35:42:ac:a2:fe:71:
3b:d7:cf:4b:ef:ae:b3:7c:81:5b:00:0d:34:ea:55:dd:e2:57:
4a:f4:de:42:7b:f8:27:e9:8f:90:59:dd:15:81:d6:27:94:fb:
4b:d4:22:24:64:0c:53:ff:e0:6d:e7:d7:19:c5:50:2e:e7:b2:
25:90:75:ca:8d:69:27:73:7c:41:91:87:ca:95:76:96:ea:3d:
71:75:61:29:ea:42:6c:36:c8:c0:cd:60:b1:ea:6d:53:2b:f2:
69:d7:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:30 2025 by rpki-client