Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier: dsmYZUhkijbwtVFUYeqydWo6EkQiYro00J2oUu5sRs8=
Subject key identifier: BB:AD:1A:A7:9D:26:88:CC:72:0F:86:87:07:E5:8E:C5:E8:74:32:E5
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial: 01976929E12EF8D6507FA4C3340015374F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number: 151D
Signing time: Fri 13 Jun 2025 12:00:41 +0000
Manifest this update: Fri 13 Jun 2025 12:00:41 +0000
Manifest next update: Sat 14 Jun 2025 12:00:41 +0000
Files and hashes: 1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: HqLvs0xH6QAoE719AMNIIQbSc/9wBOTgCs22jQCbeoI=)
2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e1:2e:f8:d6:50:7f:a4:c3:34:00:15:37:4f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
Validity
Not Before: Jun 13 12:00:41 2025 GMT
Not After : Jun 14 12:00:41 2025 GMT
Subject: CN=bbad1aa79d2688cc720f868707e58ec5e87432e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:7b:c9:09:03:9b:2c:2b:aa:c2:63:9c:76:
bc:1f:d8:7e:c5:20:56:2a:c7:91:a7:ee:46:71:ed:
e5:ae:35:5f:61:e4:fe:b8:98:b5:99:36:53:a9:ea:
fd:c8:64:63:c9:08:ea:2e:df:f8:4b:33:50:2a:09:
86:1e:a6:ea:04:e5:fa:c0:74:b3:11:b5:e6:b6:d8:
d0:04:15:d4:12:8c:94:08:23:7c:77:74:9a:aa:6a:
cb:6b:dd:81:b5:69:c5:bb:ee:a1:31:81:a8:9d:15:
41:ea:86:3e:f4:06:34:a5:b9:19:ae:e2:5b:b2:7f:
58:6f:ac:5d:06:b0:b6:15:1a:31:09:09:9b:bf:17:
f6:74:bd:0f:5a:ae:e3:0b:90:7e:c8:66:d1:c5:e4:
e0:47:69:de:c9:54:81:bd:35:25:c4:a9:99:7f:59:
80:55:14:7a:69:c4:20:c1:c1:e7:dc:8a:ac:0d:2c:
38:ab:4b:30:5a:51:7a:f1:3f:86:b5:a2:28:dc:8f:
9b:96:44:33:51:6a:76:f6:18:e0:05:21:81:6c:ea:
af:ce:80:7e:b8:e8:ee:87:ea:88:9c:5b:19:e3:71:
48:88:5e:c7:4c:af:7a:a8:95:ec:fa:9a:e5:41:76:
a0:a3:4e:73:92:70:5f:c9:e6:d9:ed:b3:7b:f3:e8:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:1A:A7:9D:26:88:CC:72:0F:86:87:07:E5:8E:C5:E8:74:32:E5
X509v3 Authority Key Identifier:
keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:2e:d2:68:75:ce:ac:d2:52:cb:a4:df:b1:ad:40:37:2d:
4a:22:22:f2:dd:fd:d6:e2:67:5b:dd:50:01:46:ef:a4:4b:9e:
83:92:18:9b:26:3f:2d:17:14:83:2a:5c:18:3f:ec:ce:b3:72:
e5:d7:52:38:80:37:64:e9:ef:ad:9f:99:c7:fc:35:4f:27:60:
85:7c:81:ec:a3:42:6c:c0:cb:a8:87:df:7c:6d:ff:b9:53:1d:
7b:e1:84:56:2a:95:ca:e4:cb:75:20:0e:4b:47:d2:44:28:44:
30:2a:2e:3f:d4:8b:44:9a:9a:e4:71:7e:d9:fc:86:84:81:1f:
ed:96:47:25:87:ec:d3:a9:df:0e:88:db:85:b2:fc:1a:63:8f:
6d:f5:2d:44:e8:50:4e:01:e9:d1:ec:de:66:35:7f:24:d5:40:
2a:37:af:f1:07:c2:9e:cf:9b:33:db:d9:f5:17:39:7b:af:1c:
41:bd:3b:b1:f4:06:f6:7d:27:f5:7f:29:1a:f1:00:37:9e:e6:
9b:12:a5:3f:8c:41:d1:8e:c0:1e:f6:e8:a2:76:0f:fa:a9:48:
1c:ac:38:95:cb:5f:73:0d:1f:86:92:44:29:2e:c4:15:72:e2:
ea:3d:40:00:c5:5c:24:15:d8:9a:9f:77:39:9a:24:92:64:c9:
d4:be:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:19 2025 by rpki-client