Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier: XIHNmGAwmhq9ztwBeRzlb9vAL5Pswd/46OChFdrlAdQ=
Subject key identifier: 66:AD:4D:75:66:1F:80:7C:DE:61:8F:3B:9E:A4:2C:7D:C8:18:F6:46
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 019779AFA8B17B77C6D5B42067EE97E741DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number: 15A9
Signing time: Mon 16 Jun 2025 17:00:44 +0000
Manifest this update: Mon 16 Jun 2025 17:00:44 +0000
Manifest next update: Tue 17 Jun 2025 17:00:44 +0000
Files and hashes: 1: 8F0Ve4qemfIe74knbJ2BWzh49o4.roa (hash: Z4/lQ0XEn+vbvsuIA+z8T81D+e9ljwjUFKwHut4Xj9k=)
2: jrWekfKR9PtlyNevk73NQ13-Gdw.roa (hash: Z5v+TrRP7ACqPME/rzSX779jbLqoXhfyRurRL0Mtb+8=)
3: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: Yfz9TsYAo9S5GK4qw88eWLMkt1Kh6HaamjgzSIVYKAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:a8:b1:7b:77:c6:d5:b4:20:67:ee:97:e7:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jun 16 17:00:44 2025 GMT
Not After : Jun 17 17:00:44 2025 GMT
Subject: CN=66ad4d75661f807cde618f3b9ea42c7dc818f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:37:02:18:b4:2f:84:aa:fa:94:a0:ac:f7:
03:52:47:55:b6:b9:21:b8:ee:91:d9:94:a7:a8:48:
28:ce:d6:52:e2:6a:e7:3a:72:3a:31:56:f5:07:8e:
80:a5:47:ab:13:d8:82:c5:e0:b9:30:71:42:5f:41:
80:c8:c8:44:43:39:5e:b2:5c:f6:15:5f:79:4b:40:
e5:0c:bd:46:5f:fb:3d:9d:70:c6:86:59:79:f9:e9:
71:ee:83:02:4f:ea:99:d5:90:d6:52:ce:ee:98:1c:
dc:45:80:96:36:d5:5d:a2:a3:eb:c9:5f:4f:d5:80:
85:c1:85:a4:64:82:9e:ef:61:76:4e:15:b3:6b:1b:
4e:52:76:d0:62:57:6f:fa:33:c6:8f:9d:9f:e4:70:
ab:47:85:ca:ac:f9:3b:54:60:5d:3c:c6:81:95:81:
2d:ff:93:5e:0a:ab:88:f9:24:d6:3b:93:2b:0e:fa:
b3:f5:99:f8:37:3f:6f:c3:8d:43:b7:5b:7b:bd:2e:
c9:e8:bb:f7:e9:77:a2:e4:aa:50:67:73:c3:10:3c:
f3:bb:c7:c9:7e:9b:ae:00:6f:6e:97:f1:e8:c3:72:
b7:53:3f:85:3f:11:81:3c:3d:f6:82:d6:cd:c2:04:
49:c1:16:fa:19:7c:f9:9e:f0:c9:d0:b2:07:77:5f:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:4D:75:66:1F:80:7C:DE:61:8F:3B:9E:A4:2C:7D:C8:18:F6:46
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:9e:4f:5f:32:42:a6:86:c5:42:f5:78:db:48:c7:d7:37:
d3:f4:69:63:00:32:90:14:d1:4c:81:b7:42:7e:b7:bf:5c:1f:
05:8b:00:ea:dc:f5:a4:f3:79:2f:b3:73:63:10:81:75:6a:d2:
a0:17:d5:99:9a:ae:03:9f:4a:44:00:25:8b:4a:9d:65:fc:ab:
a4:69:0a:5d:66:cc:8b:91:3e:85:ff:0e:1b:70:48:d2:a0:42:
56:f4:c8:95:70:b4:8a:5b:5d:0a:21:6f:d8:62:a1:4f:f3:86:
f2:c7:ca:54:03:05:ac:bd:41:6f:98:2e:e8:f4:12:1b:12:5a:
27:2a:bd:0a:44:72:35:83:68:ed:b0:c9:b4:91:53:f6:83:bc:
bf:84:f3:ff:e5:a0:fe:0b:2a:37:ad:50:b5:78:17:51:78:30:
e9:07:a7:9c:09:59:93:7b:67:7e:7c:6a:0e:41:ad:ea:a0:4b:
6b:8d:e5:c1:0e:07:d8:c0:ac:61:37:79:ea:d8:43:b6:a6:4f:
d7:aa:14:b4:39:6f:73:26:a1:84:bf:1d:80:b9:bd:b4:a6:68:
97:1b:a7:82:38:9f:b2:f6:89:a4:40:c2:89:cd:03:ba:62:f5:
47:3a:f5:eb:52:b2:ef:bf:e0:0b:87:20:c1:72:c7:3f:23:a5:
be:51:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:26:01 2025 by rpki-client