Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier: cymyE7uZxrDlcnpk3rLAie9lJ3OJaU+xYHR0kZp9W7I=
Subject key identifier: C7:83:1D:D8:25:1D:9B:FD:AD:24:7B:39:C5:79:F1:22:93:9C:FA:7B
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial: 01976DAB1FBFBEA6D0DF34593F6A3D49C5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number: 31
Signing time: Sat 14 Jun 2025 09:00:20 +0000
Manifest this update: Sat 14 Jun 2025 09:00:20 +0000
Manifest next update: Sun 15 Jun 2025 09:00:20 +0000
Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: NZM7H3lJEcaVPTguHjZ3IEcQlsMUf/Xc3b00Zcy53Mg=)
2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=)
3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=)
4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:1f:bf:be:a6:d0:df:34:59:3f:6a:3d:49:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
Validity
Not Before: Jun 14 09:00:20 2025 GMT
Not After : Jun 15 09:00:20 2025 GMT
Subject: CN=c7831dd8251d9bfdad247b39c579f122939cfa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:54:79:06:b5:ea:25:3d:7e:e1:c2:9b:6a:
a0:c5:34:a9:0f:95:c0:65:38:f2:02:34:78:6b:81:
57:c9:9c:65:cc:8f:7a:a2:58:76:73:b2:66:45:ca:
51:ce:3d:0b:9e:14:1b:7b:41:ab:9b:06:7b:d6:03:
34:d0:f9:71:cd:51:54:b2:6f:f2:02:2e:20:18:ab:
74:24:2d:ec:b1:3a:ac:2b:07:34:6b:1d:6b:b1:93:
25:7b:8d:46:d9:d7:a5:11:61:7d:9d:5d:23:c2:a1:
8b:9f:06:0f:45:ab:a8:81:df:43:f3:9d:6f:73:a9:
8c:24:ca:d7:51:76:c7:3d:b6:10:ba:36:30:0d:1e:
5c:7b:f1:32:a1:52:f6:a5:bf:c8:35:62:df:90:94:
71:20:51:f9:ba:f8:42:24:9c:ae:95:cc:1f:4a:db:
99:71:f0:a1:ae:00:55:eb:ba:16:1c:f7:cf:55:3b:
15:cb:7c:a4:6a:72:b9:fd:bf:67:c7:5d:65:d0:d9:
a9:14:f9:81:7c:63:0f:c5:d9:18:36:40:d1:5d:d2:
21:07:07:d2:a7:84:46:79:69:ce:a2:b2:46:3e:d4:
c3:85:03:22:74:fd:85:e7:f8:03:c8:16:5c:b9:e2:
b8:fa:07:a2:af:74:fc:79:74:e0:58:f1:57:30:07:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:1D:D8:25:1D:9B:FD:AD:24:7B:39:C5:79:F1:22:93:9C:FA:7B
X509v3 Authority Key Identifier:
keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:0c:c3:7d:ec:81:9a:04:5e:52:99:b3:1e:39:01:86:3d:
b6:b8:51:0b:0c:9a:55:a9:99:c4:88:99:c1:62:17:d0:b7:1b:
e7:db:20:8d:d4:1f:6e:18:97:e6:6f:d5:47:88:74:35:fe:72:
5c:f8:94:0d:e4:a6:bc:64:01:a4:a8:16:a4:cb:72:13:c6:dc:
a6:3a:3d:fa:a9:5f:b2:c2:eb:6e:e7:72:2c:63:dd:a1:64:61:
15:bf:89:45:a3:91:f8:2c:67:ca:c6:aa:22:12:48:9a:45:3c:
5b:f0:1d:0e:f2:c6:33:94:9e:71:2d:27:70:00:ac:a0:d0:62:
05:b5:e1:33:0e:c8:6c:ef:5b:8e:e3:c1:84:9d:47:aa:1f:7e:
ce:1a:66:8f:2c:97:a5:e3:7a:21:01:29:36:28:8c:a6:46:86:
34:80:b7:89:35:8c:5b:45:5f:46:e8:aa:7d:70:fa:09:9a:ce:
1a:e0:aa:e6:8b:a3:bc:e4:d4:a6:8e:f6:a5:f2:bb:c3:93:50:
77:e7:7e:62:55:1c:2e:37:b3:8f:c2:0a:fc:db:7b:23:d4:e5:
1e:d6:39:83:7e:a8:86:36:ce:d6:ef:b0:53:f6:6f:0e:41:05:
54:f0:e1:ad:5d:75:7f:06:ef:16:88:ca:37:0b:18:3c:12:fc:
8c:04:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:15 2025 by rpki-client