Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: bXiNfeWYE3QsnV3gHRqTtApwMw3G9J+bmatcCdygGDU=
Subject key identifier: 5C:92:72:69:25:26:11:56:E4:41:00:F6:4F:FC:A9:51:58:2C:EE:DD
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019770AC28CD3A3D0AF7A96A00122F59493A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0A57
Signing time: Sat 14 Jun 2025 23:00:20 +0000
Manifest this update: Sat 14 Jun 2025 23:00:20 +0000
Manifest next update: Sun 15 Jun 2025 23:00:20 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: 3x9NgSy5+A9Yxou9ZUTlMySDwacU6HJLih+YtpSA40o=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:28:cd:3a:3d:0a:f7:a9:6a:00:12:2f:59:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Jun 14 23:00:20 2025 GMT
Not After : Jun 15 23:00:20 2025 GMT
Subject: CN=5c92726925261156e44100f64ffca951582ceedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:39:bd:98:f4:f5:98:01:1f:85:82:d9:a4:
fa:63:bc:c7:5f:0f:62:85:c7:e1:ae:f3:b6:b9:b8:
05:40:03:df:01:fa:20:18:f1:2b:81:d4:02:57:bf:
85:74:9e:ce:79:48:aa:2e:ce:5c:19:6d:33:5a:de:
7b:10:87:33:d1:74:4f:51:b6:6b:4e:f0:11:69:51:
7a:54:ec:68:05:46:6e:6d:49:0a:0f:be:aa:80:eb:
13:ef:a1:4f:97:63:d2:fd:8a:d4:a5:05:82:b0:9b:
23:43:b0:04:bd:7e:91:da:31:aa:fb:95:ed:6f:a4:
03:d6:65:dd:9e:ad:12:34:05:ae:f7:26:eb:0a:ac:
c1:71:23:22:db:6a:bd:62:91:7b:30:3a:f2:a7:db:
c2:c6:3c:90:68:08:8c:3d:b7:1f:0f:79:9d:2e:d5:
03:a2:8a:8d:b4:b5:8e:68:5f:98:30:7b:cb:6c:95:
ee:3f:c7:9a:94:d9:04:58:96:5d:a7:39:0d:bb:9b:
8c:da:df:f9:3f:a5:37:7e:63:a7:59:e5:1e:01:0d:
2d:7f:c0:3a:74:8f:15:3d:ef:7b:07:2d:ec:bf:91:
ba:91:07:75:a1:81:d5:ef:71:52:94:7c:16:9b:80:
94:e0:1a:d9:c6:cc:0a:dd:78:ae:41:c6:bd:5f:22:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:72:69:25:26:11:56:E4:41:00:F6:4F:FC:A9:51:58:2C:EE:DD
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:8d:03:57:69:e6:04:ab:0a:be:a1:fe:55:8a:bc:cb:ec:
f5:4b:11:11:fb:1a:69:ec:16:2e:0d:e9:4d:34:55:9f:13:63:
de:03:ef:55:d5:50:40:83:4a:e2:df:49:83:af:27:0d:d5:fd:
4d:68:0c:e8:f8:79:d5:9c:cb:c5:8e:6a:b8:bc:00:60:3e:86:
e7:86:d8:e0:89:f5:36:60:33:53:0f:2f:d0:f8:1f:84:37:89:
18:79:25:5a:19:a1:01:7b:4f:a7:64:43:e7:4f:d1:6b:e7:f5:
9a:09:38:2f:0c:e7:a8:7d:61:a7:20:12:96:83:c4:09:32:e5:
4c:b7:22:9c:5a:61:37:bb:ee:51:c4:80:f1:79:d6:10:f2:5c:
75:44:6c:d7:70:60:0d:ac:df:58:f7:53:a3:a6:3c:fe:e0:24:
82:fb:af:2e:93:a8:63:8a:cb:27:85:c6:5a:46:48:bc:71:28:
a2:1e:2f:9c:06:b4:c4:67:c3:33:c0:24:0c:8a:6b:c8:69:5a:
a1:d8:22:cd:09:a0:aa:1d:30:b1:93:f2:c1:ba:2f:30:65:c1:
90:2c:d7:64:af:c4:78:f1:53:93:17:aa:98:4a:08:9c:88:b8:
52:93:04:71:bb:4a:16:4b:41:fd:ff:45:a4:5a:e8:c6:3a:f4:
ca:97:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:43 2025 by rpki-client