Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: 4Iq+5Jassl8fxyykwuscUryULzWlbWkNM8xYIPvyPiI=
Subject key identifier: 64:EA:5D:84:02:F6:61:5A:3B:4C:B8:68:D7:17:9D:73:AD:41:47:6F
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01977609CC4BF328C4663B2AD1483A7D52D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 00:00:42 +0000
Manifest this update: Mon 16 Jun 2025 00:00:42 +0000
Manifest next update: Tue 17 Jun 2025 00:00:42 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: xFTnzkNvP/UR421nw6+vM/xhbixGmID3id6crBArn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:cc:4b:f3:28:c4:66:3b:2a:d1:48:3a:7d:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jun 16 00:00:42 2025 GMT
Not After : Jun 17 00:00:42 2025 GMT
Subject: CN=64ea5d8402f6615a3b4cb868d7179d73ad41476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:1f:e2:6e:f2:6c:79:a9:34:42:37:3f:1c:
f5:b1:fd:0f:95:8b:fb:a9:64:7e:03:12:33:fc:73:
2f:c9:e9:5b:a7:2a:f0:0f:84:e5:8f:70:b6:53:39:
b3:b6:7c:b7:b7:8b:7f:96:a7:a7:05:3a:35:ce:05:
1f:14:5a:f8:5a:13:44:d2:f4:2f:8d:ce:f6:68:f9:
15:a2:ff:54:d6:c2:71:db:dd:44:12:08:ed:ae:c5:
60:49:18:c7:d9:e7:a1:a1:26:bd:71:33:ef:3a:55:
eb:15:b4:d9:27:57:dc:d4:34:9a:8f:5c:29:63:f4:
c0:20:0f:ea:a7:04:77:4f:26:10:86:63:1b:0b:74:
d7:a5:79:9d:7d:3d:9f:58:18:89:a4:f8:93:11:c3:
eb:ad:33:ca:7a:62:1b:8f:72:ba:72:b2:42:24:e7:
19:1e:5e:f8:2c:fe:9a:00:b9:82:0c:f6:9f:08:b1:
89:62:5c:bf:ef:7a:3b:20:32:84:35:68:31:bf:a0:
39:11:7e:87:cf:61:91:3a:10:ed:b8:f7:4d:a1:64:
72:8a:57:92:50:c4:81:6a:b4:28:15:f7:4a:85:5c:
83:54:8b:41:1c:ce:e1:f2:3a:fa:cc:10:55:b8:a0:
61:df:ad:91:36:70:75:25:73:f7:9f:d3:a5:de:86:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:5D:84:02:F6:61:5A:3B:4C:B8:68:D7:17:9D:73:AD:41:47:6F
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:86:05:a0:5b:8d:85:5c:b2:31:e1:66:1d:f1:e3:8c:ce:eb:
d3:d9:a9:16:9f:49:3a:11:f6:b9:84:51:ef:18:61:f1:a4:39:
6a:5f:a3:88:34:df:07:66:9d:87:d1:ff:8f:ec:18:35:e4:7c:
0d:8c:d7:02:3d:16:02:96:6f:44:d1:17:21:06:a0:55:7b:96:
b8:e1:5f:1f:c3:89:f0:d7:4e:bb:46:2c:e6:aa:31:50:ea:e3:
a2:9e:4b:6f:c4:dc:1b:49:fd:1a:7b:15:17:67:32:ff:45:bb:
d9:ef:58:3e:16:ce:43:d5:5a:e7:08:96:54:65:7d:46:ac:c9:
af:00:2f:dd:01:a5:d8:55:f3:d5:bd:a0:95:75:69:a1:5e:d1:
07:9c:de:07:8b:c9:f8:4b:d7:fc:36:2f:a5:ed:a8:91:ba:e1:
d4:d6:33:b2:41:d9:a7:f0:8e:ae:91:4a:e6:61:ed:fa:c3:15:
1d:5f:cb:21:67:da:bf:11:3a:3f:d0:d8:4e:ec:90:15:aa:7e:
7a:79:1e:de:0e:bd:db:39:04:2c:b0:ea:3a:49:6e:44:23:b1:
19:9b:71:05:01:1d:e8:4f:f6:2c:95:c3:ba:3e:b8:50:44:69:
af:82:0c:3b:d3:99:d3:9e:a3:4a:98:ea:aa:8f:e0:43:1b:4a:
74:ce:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:26:32 2025 by rpki-client