Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: /EbfKT2cZfGC7t7MXHpFQ/jdqp7jX5RlU6m7sapkH/4=
Subject key identifier: E5:B1:18:8F:2C:36:B0:75:50:5A:6F:73:B0:F5:CC:3A:58:99:58:C9
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 01976DAB63156740E96D7C2D58E5DB0191DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 0FC6
Signing time: Sat 14 Jun 2025 09:00:37 +0000
Manifest this update: Sat 14 Jun 2025 09:00:37 +0000
Manifest next update: Sun 15 Jun 2025 09:00:37 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: PUkdbMsCJDvQnELii/DuyNVskyxNqTWEiKvPjdVLtfw=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:63:15:67:40:e9:6d:7c:2d:58:e5:db:01:91:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Jun 14 09:00:37 2025 GMT
Not After : Jun 15 09:00:37 2025 GMT
Subject: CN=e5b1188f2c36b075505a6f73b0f5cc3a589958c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:e0:3c:8d:66:c4:cb:0c:cf:1c:10:a3:68:
e3:fe:d1:fb:fe:1d:c6:9a:45:77:cf:4a:e3:2d:b3:
3a:98:6b:64:98:38:d4:72:a9:d6:f3:d2:2c:0f:69:
49:04:cc:1b:97:b5:cb:30:c6:2a:1e:df:87:e8:5a:
57:22:44:cf:3c:98:b1:da:6a:61:f2:bb:b0:a3:54:
1f:dd:90:73:1d:60:6d:09:12:a3:6a:a8:b9:e1:76:
08:11:a0:59:9b:df:9d:f7:4c:f4:f6:3f:14:55:02:
22:ff:bc:b5:93:84:86:8e:17:a6:e9:e0:74:2c:05:
10:10:29:f8:9b:90:9b:87:5e:14:f3:12:d3:7b:32:
e6:f4:11:f3:ef:c1:c0:90:24:29:7b:9e:df:0d:6d:
b2:20:e0:fe:e6:79:7c:26:49:fc:79:a3:35:4b:c8:
a0:53:c5:58:d3:8e:62:d8:75:20:74:ae:86:21:46:
28:dd:6a:d2:89:d9:49:6b:eb:11:e4:af:e2:92:b5:
d1:55:aa:96:1d:fd:0e:8d:22:91:46:f0:73:32:8a:
4b:ec:0a:3c:50:47:cb:32:0e:3c:fd:25:96:b9:63:
3c:3c:5b:4d:d2:06:95:47:3a:45:e1:d0:7c:3a:8b:
16:1c:7d:a7:a7:72:c5:d9:c6:87:44:11:af:ed:5a:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:18:8F:2C:36:B0:75:50:5A:6F:73:B0:F5:CC:3A:58:99:58:C9
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ea:f7:cd:08:60:5b:87:fc:33:83:dd:dc:af:86:e3:c3:d7:
8b:66:88:97:dd:8b:e1:54:31:f8:76:aa:ac:aa:50:02:38:47:
f4:95:55:88:68:9c:4a:de:95:da:ca:b4:29:f1:c3:88:c8:71:
02:2e:38:04:66:6f:84:58:3b:88:3e:da:ec:ee:38:0b:67:d2:
30:b3:d6:8f:f2:d1:8f:e3:85:dc:4d:e8:71:be:b7:3b:4f:73:
e5:da:1e:e2:e5:0e:d5:6d:c0:c1:d0:76:9b:23:5d:5e:0e:46:
70:e9:a4:13:db:2f:ba:2d:8c:09:92:fc:ef:6b:be:dc:ec:87:
23:b3:ea:0b:d4:b3:c1:e3:8c:7a:27:0e:4b:ed:40:7a:b4:65:
ff:30:95:1f:7a:ad:8c:62:f9:a1:8e:16:59:75:ed:78:8b:0b:
6d:43:92:d7:db:e8:58:46:71:06:fb:01:6a:7c:bb:c6:13:bf:
c3:e0:fa:16:d6:40:c3:13:5e:a8:bf:4a:46:ab:d2:16:e1:04:
a3:e0:6a:ab:fc:f6:5e:35:8b:9f:92:8f:85:67:1a:ab:6d:9a:
d8:b4:44:c3:b3:a7:90:dd:cd:65:ed:3e:c3:87:10:86:ad:b1:
4e:c0:47:76:ca:fc:49:66:d3:51:8b:85:48:11:9f:7b:cf:41:
44:81:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:07 2025 by rpki-client