Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: 3g8FY6NXxqC1OoBSEg3+rRvGUWHL3UgnECQz/mKS+UQ=
Subject key identifier: 0B:B0:0C:65:71:46:D0:ED:3C:B4:27:10:23:54:B3:55:05:DA:54:C3
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019770E31DF4294C9CAD771BC8BD099EEC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:21 +0000
Manifest this update: Sun 15 Jun 2025 00:00:21 +0000
Manifest next update: Mon 16 Jun 2025 00:00:21 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: 1JGWDpBPfXFdgDeRk93ytgqauZ6OH3SQFZnYzX0GIvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:1d:f4:29:4c:9c:ad:77:1b:c8:bd:09:9e:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jun 15 00:00:21 2025 GMT
Not After : Jun 16 00:00:21 2025 GMT
Subject: CN=0bb00c657146d0ed3cb427102354b35505da54c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:01:6d:2b:7f:eb:36:93:75:74:bf:34:38:
3d:16:4c:29:89:f1:f2:88:58:78:7d:eb:2c:e1:20:
8a:a6:17:5a:1d:1e:cc:8c:3a:0c:e3:9a:da:d6:fc:
d5:bc:a0:5d:47:a7:0f:94:80:2f:3a:7d:77:d6:3f:
77:27:d5:6d:0c:7b:fd:d6:4e:3b:6f:5f:d2:62:69:
28:42:ef:31:87:b4:69:ef:d3:30:f4:d6:cd:bf:3b:
75:d5:70:75:fb:01:f9:1d:21:96:3d:ec:96:fb:19:
f3:d2:b5:e8:ee:c0:35:aa:f6:68:7d:b4:fb:4b:83:
53:16:7b:88:45:68:b2:4f:bf:45:85:74:ef:85:88:
92:a7:30:2f:16:e5:71:0d:de:bd:a0:df:fa:25:e9:
3d:a8:36:98:18:f6:23:84:31:b9:02:4f:c7:a1:bb:
a7:12:bf:af:df:92:a7:f6:a1:ef:c4:8b:92:14:18:
c0:11:86:b0:24:1f:81:49:3f:69:07:74:ea:33:6c:
e9:23:88:b0:81:da:b3:cc:a6:18:a1:36:d2:97:7a:
0a:fe:35:9c:59:f9:69:41:cf:81:65:b1:11:51:3c:
4d:f8:ca:d0:93:b8:10:47:f0:e2:a7:ae:ae:ed:2a:
4f:be:84:7d:93:81:d1:39:5b:4a:64:7e:9c:ea:6f:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:0C:65:71:46:D0:ED:3C:B4:27:10:23:54:B3:55:05:DA:54:C3
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c4:0c:e0:13:dc:dd:f5:33:1f:42:1a:44:01:68:c8:48:88:
b7:13:42:0e:81:59:8b:17:34:4b:85:c0:2e:de:74:19:54:1d:
67:6b:67:ea:72:f4:33:6d:c7:ce:21:47:9a:4c:98:df:60:57:
34:0f:54:64:1d:64:6e:d8:82:f1:41:98:41:6b:47:de:e9:60:
45:3b:4e:5a:d5:91:72:77:46:bd:40:1d:46:2e:42:22:e5:96:
42:0e:bd:77:ed:bf:c4:d6:20:56:c0:d8:9a:dd:20:f7:b1:9c:
cd:66:0a:aa:8c:a9:60:f7:15:5c:45:e6:41:d9:fd:1e:c3:8b:
e0:94:ce:5e:59:6e:a4:c9:8c:72:47:13:6e:a1:8d:88:f0:a8:
0f:b1:6f:fc:a3:86:b6:b3:8a:e2:c4:d1:c9:d7:b2:f1:e5:3d:
17:f7:62:7b:99:63:1d:06:5a:a1:f4:79:a4:be:c9:a0:88:41:
04:6a:96:91:8f:ce:b5:04:25:55:e1:cc:fe:22:62:45:46:9a:
a7:30:1a:39:41:5b:ce:49:41:52:96:25:f1:0a:ab:c7:ff:c9:
d3:57:21:41:98:08:23:49:ff:75:c5:a2:25:e2:c6:1e:d0:0e:
93:13:6d:c7:0a:c8:5c:db:d8:e3:c4:b3:53:18:10:86:73:76:
e9:7e:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:40 2025 by rpki-client