Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: Xt5aa6oRZLhdAB2iNBIQCdWv4uyIfKwqBh18Arp9ZEE=
Subject key identifier: 80:C2:DA:13:C0:DF:B0:29:25:47:F5:71:80:27:19:67:F1:7D:4F:40
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 01976C2B66D62DFF9DC004081CD01B323862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: qPaUodwYBjXqL867gDlx9dUcRtOw7/C6LproRRl+dfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:66:d6:2d:ff:9d:c0:04:08:1c:d0:1b:32:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=80c2da13c0dfb0292547f57180271967f17d4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:55:99:44:05:05:4f:a4:11:d6:74:e2:3f:
2f:e9:9b:98:1a:47:fb:e7:55:7a:d2:20:9b:c6:fd:
f4:b7:66:0b:48:96:8b:5b:4e:19:19:fa:7d:99:06:
01:99:d0:a3:d0:b6:24:6a:f7:af:7f:b7:47:a7:b6:
af:93:cc:15:42:38:63:40:17:68:df:90:b5:8d:aa:
bd:ce:9b:88:57:9b:7d:bf:f1:70:fa:a2:63:30:f6:
81:ef:a2:f2:bb:36:36:22:29:7c:e9:10:3d:62:e3:
c9:3b:3e:fd:cc:dc:11:ff:c8:d6:a4:d5:e4:30:d2:
0d:85:49:a5:42:5a:6e:50:c8:29:db:7b:ae:c9:86:
a0:2a:9e:52:97:53:51:aa:15:cf:8a:20:6d:74:06:
c6:6c:ec:d2:b8:8c:60:f7:45:52:95:23:c8:11:7b:
53:20:52:3a:c2:72:32:25:2c:dc:2b:af:d0:f0:ab:
21:ff:e0:3f:ba:51:c0:29:64:24:47:c8:6b:76:7f:
7b:0b:f2:71:59:b8:55:bd:e3:46:65:5b:b4:54:6f:
6a:eb:81:2a:bd:85:ae:09:34:39:9a:95:de:81:6e:
f6:e5:2b:44:6d:bf:4b:75:1e:fa:49:53:02:58:c2:
e6:1a:b1:b6:bc:64:12:78:49:52:8d:2d:f0:69:04:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:DA:13:C0:DF:B0:29:25:47:F5:71:80:27:19:67:F1:7D:4F:40
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:a8:00:17:ee:ea:15:72:ca:e2:b9:8b:d6:82:04:b7:ed:
16:78:ec:84:02:fe:91:93:b7:2f:a2:b6:31:e4:a4:3a:32:1c:
a0:73:df:64:20:7f:bb:ce:34:3e:55:ab:10:6b:5e:61:22:7a:
0c:67:24:f8:ac:81:e1:e8:b4:8f:58:ac:4e:5a:7d:0d:d6:ce:
1b:2a:93:1c:86:2d:06:fa:49:a4:84:31:3b:6b:b0:89:b1:56:
67:c4:d7:4d:bc:31:3e:0a:07:24:cb:28:ad:93:e9:e1:d4:ae:
44:fe:cf:3a:7d:a0:3d:e4:2b:40:77:bb:71:f2:06:43:d0:8a:
d6:47:d8:f3:48:06:01:7e:7e:a2:cc:cb:5d:c9:e6:1b:cd:c7:
90:f7:07:cc:79:6e:02:61:df:79:c7:f0:78:82:7d:21:5d:78:
61:31:89:f8:70:7b:ce:eb:30:07:93:31:bc:99:8f:0d:2f:3f:
52:aa:97:8e:b0:e2:5a:d5:81:7e:f8:02:45:75:83:a4:e9:f5:
93:74:c9:62:ab:ee:11:db:ce:05:8e:4b:a1:bb:a3:3b:58:25:
f0:59:60:96:52:01:b7:d9:04:f2:f0:c7:51:23:b7:75:d2:00:
ae:1f:be:74:18:c5:78:42:03:c1:a6:29:81:de:b0:89:3b:b7:
d0:73:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:52 2025 by rpki-client