Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: FgaxPRIwleFROJ/crv9VzV3l8s5zKI3u59sf3Eg53ws=
Subject key identifier: 75:08:39:5E:21:25:C4:51:9B:77:3F:16:1B:B9:6D:50:4B:6A:99:C3
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 01976A73594B38D09F0AFDB424A495774B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 1203
Signing time: Fri 13 Jun 2025 18:00:33 +0000
Manifest this update: Fri 13 Jun 2025 18:00:33 +0000
Manifest next update: Sat 14 Jun 2025 18:00:33 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: lFMiH9LVwpdeeMUWYM/KFHgVBGgxeygyQFero+bXswc=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:59:4b:38:d0:9f:0a:fd:b4:24:a4:95:77:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jun 13 18:00:33 2025 GMT
Not After : Jun 14 18:00:33 2025 GMT
Subject: CN=7508395e2125c4519b773f161bb96d504b6a99c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:18:bd:d7:29:aa:2e:d5:b5:f3:31:40:60:
10:ff:a6:e6:2c:0c:62:f9:2f:41:6d:81:ec:86:2f:
6c:52:39:45:10:2c:3d:94:c3:d5:90:72:28:2c:41:
45:d2:d1:0e:77:46:9a:9f:76:63:2d:bb:db:78:ea:
7a:8d:1a:4e:ca:6a:bf:bb:ae:ca:67:b9:b0:a4:c0:
96:85:2c:2a:e7:fd:d6:4b:b7:3e:ae:77:c9:6a:1f:
69:4b:97:74:1b:b4:79:6a:8f:a3:c2:e5:35:c8:da:
8e:e8:46:a8:e6:15:ef:4c:f9:b3:ac:a1:6d:e9:d2:
62:99:35:e1:7e:4e:bb:50:1f:cd:e9:81:0f:ff:dc:
6b:6e:16:81:ac:d4:af:e2:03:c4:42:a8:08:33:d2:
7c:7b:86:fb:fe:16:e8:ab:5c:07:09:10:ef:47:ef:
e7:75:a8:9a:d4:9a:eb:d3:5a:5f:c4:1f:66:f4:ac:
53:99:7d:7f:a0:c9:70:00:44:8d:67:f6:04:3d:22:
19:76:f6:9d:95:ed:51:7d:3b:a7:71:bd:c1:dc:96:
ad:7d:08:59:b0:44:b9:eb:57:64:71:a7:c1:58:af:
00:6d:71:2e:84:7c:8f:e0:a7:23:77:ad:9a:a4:13:
6f:4c:aa:c5:00:81:b0:b6:c7:82:55:65:d3:99:0b:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:39:5E:21:25:C4:51:9B:77:3F:16:1B:B9:6D:50:4B:6A:99:C3
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:f5:44:d0:f4:ba:a0:e1:32:a2:ea:cf:d4:c0:8a:25:4e:
8c:b6:ac:2d:6b:25:fb:5b:b0:6f:d8:e4:b0:51:4b:7c:65:d0:
86:5e:9f:a8:69:c8:5d:2d:31:e9:b8:59:69:fb:7f:42:20:7b:
34:66:f6:f3:c3:e8:77:b9:95:ae:cc:65:31:38:a1:35:b4:03:
6a:92:87:d2:4d:37:9d:50:e4:38:7c:ee:07:a6:5d:18:b5:98:
65:18:35:10:55:3f:71:d7:45:dc:65:f2:0d:8a:17:cc:c7:2a:
3c:bd:0a:58:07:e0:54:7a:25:46:37:35:97:3b:c2:22:ba:98:
95:fb:9b:9a:4b:81:46:2d:92:98:d6:15:84:cc:96:fe:58:b7:
d7:af:12:6f:7e:87:91:26:e3:23:75:5b:08:8c:f0:88:e9:3c:
4b:de:ca:53:78:66:36:d7:5d:50:48:c9:08:2c:92:97:37:47:
fa:07:c4:cc:b5:fe:f6:fe:db:57:36:d3:8a:a2:77:bb:ae:0c:
5f:ec:03:6f:7b:d2:9f:2b:3a:51:bd:43:a4:9a:7a:1d:26:99:
1c:0d:d8:88:43:77:75:1a:7e:9b:99:1c:83:bf:d3:be:1f:80:
25:84:bb:f3:63:11:b4:26:08:a1:2b:b1:f6:9f:62:78:81:e7:
5a:c2:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:24 2025 by rpki-client