Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: tHgxWcH00nAqy6VbXlrcni8tz8f6PK0IPyc1pMYv01w=
Subject key identifier: CC:87:4B:3F:6B:01:03:DD:35:F7:5F:0C:AE:40:0A:D9:4E:E7:D8:5E
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01976E87818BC1940E05B87245A50BA9EA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0E52
Signing time: Sat 14 Jun 2025 13:01:03 +0000
Manifest this update: Sat 14 Jun 2025 13:01:03 +0000
Manifest next update: Sun 15 Jun 2025 13:01:03 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: UAOErE5Z1V07GaUQAPO4yrqCFJigukpEY03ZaKS7J6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:81:8b:c1:94:0e:05:b8:72:45:a5:0b:a9:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jun 14 13:01:03 2025 GMT
Not After : Jun 15 13:01:03 2025 GMT
Subject: CN=cc874b3f6b0103dd35f75f0cae400ad94ee7d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:be:ed:89:f2:2b:9b:90:97:db:73:d1:18:
9d:2b:04:5c:a2:10:bd:18:74:a1:e9:41:15:40:bf:
b0:57:48:f1:c3:ff:e9:93:01:14:d0:2d:4e:98:f8:
d1:b5:b2:7f:3f:7a:85:39:5a:1e:0a:15:47:2d:a2:
29:68:a6:91:88:59:48:35:c9:2d:96:64:e7:38:c0:
dd:4f:29:8c:b7:8d:43:7a:8b:8e:ae:70:69:b3:6c:
5b:08:11:7f:c4:4e:b1:6f:c1:f4:79:f5:56:13:62:
28:35:9d:57:24:e0:a0:60:1a:d1:f3:bc:4f:05:a7:
a7:e3:98:98:34:8f:15:da:21:cf:70:f0:3e:5f:fa:
6a:a2:2b:94:6e:01:6f:4d:f5:6a:87:31:33:d7:da:
4a:e7:12:6e:f5:db:56:67:7e:f8:1f:ec:13:dc:1c:
0b:80:e5:f9:05:94:7c:a7:53:55:0d:b0:14:88:85:
51:68:d3:e2:39:82:dc:4d:e8:dc:05:9d:de:5d:43:
e3:78:75:26:97:76:c5:4c:a4:47:06:e0:fb:cc:7a:
3a:6f:2b:21:c9:7b:70:cb:89:86:2a:79:0b:18:ff:
97:ec:f6:a0:6e:69:a5:51:46:70:f1:35:ed:08:74:
d8:10:eb:e2:67:3d:40:d8:7a:4e:3c:ab:19:86:c5:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:4B:3F:6B:01:03:DD:35:F7:5F:0C:AE:40:0A:D9:4E:E7:D8:5E
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d4:be:01:7a:25:bd:99:15:6b:a3:ec:76:43:57:4b:a4:f6:
58:d2:0b:e5:e7:e6:59:df:cc:5c:2f:e0:93:d4:aa:a2:7e:91:
ce:f7:15:b7:bc:72:4a:b6:44:08:5f:d9:a4:8c:8a:8e:bf:6b:
8e:1c:80:97:b4:47:07:8c:26:39:eb:31:ef:07:d6:e9:dc:9f:
3c:13:ff:75:06:fa:db:e1:2f:e5:f8:ca:57:12:4a:06:80:8e:
66:63:40:a2:be:a8:35:1c:fd:05:fa:67:a1:22:e4:14:11:c4:
fe:0d:7c:98:0e:ff:01:9c:a7:3e:4b:cd:d6:41:27:44:71:93:
86:d7:d3:d7:41:44:e7:06:0b:13:a4:e4:30:f8:e1:6f:63:9d:
52:eb:51:8f:82:b4:bf:e3:af:e4:4a:62:92:3b:48:0d:0f:7d:
97:83:3f:e1:d6:a0:9a:fc:dd:2b:2d:b0:05:cd:3d:69:09:9d:
f7:87:b7:f8:d6:3d:1c:7a:5b:87:c8:2c:12:5a:29:92:8d:92:
46:c6:67:8b:8b:ea:20:da:48:6e:f2:2b:96:a4:c2:17:1f:5d:
9e:41:1e:fb:3c:fa:20:83:91:28:00:73:3e:1b:6f:3a:b9:9a:
33:fe:3f:4b:8e:0c:1b:70:f8:5f:7e:c6:5b:29:62:aa:82:61:
f6:36:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:38 2025 by rpki-client