Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: 4Xa7HPAIqY3fCLJ6jH9sldBNkIs1T0ZcWgBpI51LNkc=
Subject key identifier: E4:AB:A7:43:30:22:C4:51:23:A7:DC:43:B2:15:09:1D:8D:2D:24:E3
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 01976BF416E68CE3581FF6A9AE120BD1EE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 01:00:48 +0000
Manifest this update: Sat 14 Jun 2025 01:00:48 +0000
Manifest next update: Sun 15 Jun 2025 01:00:48 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: +HY8ayUVW8rKojRYWNHTj3OeOGaRtl6zdNpQHm4CCIc=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:16:e6:8c:e3:58:1f:f6:a9:ae:12:0b:d1:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jun 14 01:00:48 2025 GMT
Not After : Jun 15 01:00:48 2025 GMT
Subject: CN=e4aba7433022c45123a7dc43b215091d8d2d24e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:73:60:ce:9e:5c:a3:9d:50:5e:06:86:2e:
67:f6:fd:eb:60:f2:90:1c:5a:ba:45:8b:e9:1a:61:
ec:a9:df:02:5b:f6:02:ae:e4:c9:e4:6f:74:24:68:
c3:54:c8:eb:7e:ba:ba:9e:7d:f9:91:28:54:cd:f1:
35:c8:66:87:24:8c:0f:8f:15:a0:ed:c0:f4:b3:00:
6f:15:91:ef:03:c3:a5:e3:2d:9d:71:5b:a8:d6:d8:
70:84:2d:55:02:bb:fa:0d:0a:fb:20:4c:26:20:e9:
31:7c:db:7c:31:96:ac:9a:b2:39:9f:be:64:48:12:
27:04:9f:91:65:c3:b0:56:00:24:b5:5f:a7:13:00:
e2:92:83:1f:50:e7:7e:eb:eb:8a:27:6a:ae:ba:87:
9c:55:f7:91:50:e8:4f:cc:8b:51:00:0d:6b:4a:3e:
2e:7b:82:65:f1:eb:39:7f:03:dd:2f:b3:18:de:a6:
1a:f2:b4:77:e2:2c:0b:a0:a7:12:60:0a:b4:69:a7:
1c:4a:40:20:1d:44:76:e8:36:38:6d:3a:17:c4:9d:
cd:9f:d7:89:cf:84:54:ea:d5:1a:8a:4e:cb:65:29:
94:f7:8e:0a:43:ac:c2:9f:39:be:40:05:85:28:10:
18:cb:21:4d:4b:95:34:81:49:ef:3a:14:dc:c8:e2:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:A7:43:30:22:C4:51:23:A7:DC:43:B2:15:09:1D:8D:2D:24:E3
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:32:81:34:12:6c:81:b1:68:3b:0d:d7:ea:81:d6:07:d4:
49:a1:bb:db:9a:07:4b:53:59:73:a6:8e:3d:27:5a:6c:8c:d5:
5e:16:f6:b8:12:23:b9:9a:d3:0f:81:62:7c:a5:19:66:4b:cf:
de:f4:c9:37:59:9b:38:c7:ff:c7:13:32:f5:d3:09:80:b5:4e:
fa:97:7a:2f:55:4a:69:be:fe:d0:79:24:0a:89:4f:30:37:0e:
f7:23:5c:12:f8:67:4e:49:95:4f:81:72:9c:3e:a9:ff:b1:38:
6f:6c:6c:36:61:ff:31:11:51:d2:0a:36:0b:2a:d7:1a:f0:34:
c4:81:56:b9:fe:28:3b:bd:12:0f:91:74:e1:73:3f:fb:f7:4a:
32:4e:cf:21:77:30:4b:be:19:94:22:7c:c6:b2:ee:cc:a1:0a:
7e:d7:0a:bf:e7:cd:35:86:33:54:ff:eb:96:a0:24:04:d1:39:
c8:65:98:07:de:34:10:69:d8:a3:2f:6a:6b:56:e8:08:df:67:
43:57:b3:3e:53:7a:cf:49:b0:fe:6e:67:ac:fb:df:ce:4d:36:
87:4b:44:fa:26:23:ad:06:d3:b0:4b:12:d4:32:8c:60:2e:5e:
e9:43:50:67:1c:76:98:2f:24:bd:b8:4d:dc:0b:4e:73:9b:ba:
b0:ea:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:11 2025 by rpki-client