Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: orcKWAdarTQVaiaHw0ZV0GOkvtxOX/blyIX3a2gReiw=
Subject key identifier: F2:C0:EA:2E:EB:F1:2D:82:03:26:16:63:B8:5B:00:09:BF:6D:49:A4
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019768F2C0704EDB6EA7408A716D272259CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: AE
Signing time: Fri 13 Jun 2025 11:00:28 +0000
Manifest this update: Fri 13 Jun 2025 11:00:28 +0000
Manifest next update: Sat 14 Jun 2025 11:00:28 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 3gIinwr8gZDVUmLJ1/4++u9u7qZWDFI5Wexp84oxeWo=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:c0:70:4e:db:6e:a7:40:8a:71:6d:27:22:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 13 11:00:28 2025 GMT
Not After : Jun 14 11:00:28 2025 GMT
Subject: CN=f2c0ea2eebf12d8203261663b85b0009bf6d49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:03:19:49:49:23:3b:b6:f2:c3:bd:92:11:
9c:c8:05:98:2a:a2:ef:12:2d:63:3f:24:18:f6:5b:
98:ab:48:27:8a:0c:6f:c7:24:9a:75:b9:60:72:93:
90:e1:df:29:fa:f6:75:74:f6:45:d5:5b:0f:ba:22:
0d:f2:53:bb:1b:4f:9e:41:13:3b:6d:a9:d2:da:24:
97:a3:22:b2:e5:59:c8:19:88:9e:5d:a5:72:3d:ed:
d5:62:90:91:01:7b:3c:18:11:14:ff:e2:e4:84:2f:
9c:fb:09:f4:b0:7f:c8:89:da:b1:5a:4b:c3:5e:d0:
93:37:85:44:70:6f:e6:bd:21:13:8e:a5:5f:1f:22:
22:86:47:cd:3f:81:30:6f:10:df:88:27:4f:30:1f:
9d:b8:b8:2b:a7:1c:e9:fe:84:4c:0d:51:93:f8:88:
e4:29:dc:58:29:6a:55:8b:04:84:d8:da:a0:77:20:
70:9f:79:d6:9e:e0:cc:54:24:57:ce:25:8c:d9:07:
b0:f3:a2:80:6d:2b:45:cf:28:aa:94:e4:e9:70:b6:
a8:7b:ef:f7:27:73:e9:11:cc:68:7d:3b:88:f7:ba:
e2:7d:d0:1f:16:83:85:19:f9:8c:b9:11:29:7f:1e:
92:57:27:ec:ea:c8:93:b6:f5:c6:64:c0:e2:26:0a:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:EA:2E:EB:F1:2D:82:03:26:16:63:B8:5B:00:09:BF:6D:49:A4
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:3a:5c:fd:7d:a2:11:e1:e0:f0:70:1c:75:ba:17:17:79:
0f:e6:71:83:50:c1:dd:ac:7b:7e:72:54:16:70:5a:a5:ff:47:
ec:5d:bf:58:f4:b2:d5:77:60:2b:36:b2:38:c7:52:f2:85:14:
fc:cd:55:d4:c5:d2:13:96:45:22:e9:f0:b7:b0:07:5e:dd:50:
00:3a:74:16:3f:1c:12:52:b6:b0:33:cb:54:4b:33:1a:fa:f0:
c2:f8:4c:1e:40:9f:41:93:a6:7d:97:33:ae:87:b4:63:16:57:
57:51:77:0b:6c:b9:9b:cd:04:84:95:34:74:50:06:49:b5:ab:
01:26:c8:c6:e7:98:e7:ef:f0:92:e4:f9:04:02:5f:b0:32:96:
04:f5:53:fc:8b:dc:1f:04:62:eb:9d:5f:02:8b:40:fe:bc:b0:
29:3c:c3:c5:77:0b:34:b2:4c:ff:6f:00:08:a3:49:6b:23:00:
aa:19:de:78:a9:56:3a:df:30:9e:9c:ef:65:2f:ff:d3:3d:7d:
7a:d6:25:24:58:3a:ad:21:f7:03:ff:82:52:8c:fb:b1:b6:be:
f2:c3:62:4d:d2:9c:6c:31:29:5d:fe:00:39:57:ed:ea:64:20:
c7:1a:36:3a:09:31:92:e2:c1:fb:72:51:10:fc:57:60:56:83:
1d:92:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:58 2025 by rpki-client