Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: u1sa0rL0Ha8GPu+XhT8okwSDlLONGYiQBCj9na+ni4Q=
Subject key identifier: 05:B7:05:4B:9D:AF:F8:8E:B1:40:3E:50:FA:B5:05:50:09:85:85:B8
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 01976884F415496ECA37450CE1CEDBDEDFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 0FD5
Signing time: Fri 13 Jun 2025 09:00:33 +0000
Manifest this update: Fri 13 Jun 2025 09:00:33 +0000
Manifest next update: Sat 14 Jun 2025 09:00:33 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: tN7t1G9KXbGAm7+bdIl8KoyXkKWBux3Ey1109XhetNg=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f4:15:49:6e:ca:37:45:0c:e1:ce:db:de:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Jun 13 09:00:33 2025 GMT
Not After : Jun 14 09:00:33 2025 GMT
Subject: CN=05b7054b9daff88eb1403e50fab50550098585b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:bb:99:3c:6d:35:8c:a6:5d:af:13:d5:42:
e8:5b:fa:ba:a7:bd:a7:1c:64:95:2d:81:8d:d5:0b:
5d:97:6f:3c:10:ee:2b:55:ac:ab:f5:bd:10:3c:e7:
58:d9:4f:31:4a:3d:e8:e3:60:27:c4:7d:e0:43:c6:
3f:e6:80:fc:cc:90:c2:ae:1f:95:f5:a4:9d:61:97:
5e:ba:0d:21:31:8b:51:76:37:cb:b8:1c:39:02:f8:
f5:e3:70:f6:56:42:fe:55:00:cd:be:a5:fe:da:6c:
d8:c9:6e:33:42:60:3e:d0:5a:6d:5d:5e:ac:7f:2c:
31:4a:24:5a:ce:a2:0b:95:e7:14:78:54:5f:30:84:
97:4d:d6:2f:79:e9:07:0d:f2:7b:d1:fc:15:e9:85:
66:e6:57:09:39:c6:61:9b:51:0a:6f:42:b8:f2:aa:
c9:b3:81:e6:d9:f8:1d:77:9f:8f:36:7a:70:11:07:
bc:bd:bc:d0:d8:28:ce:0a:09:5b:df:4e:99:41:37:
41:9c:14:2b:32:93:3b:dd:4f:7d:d0:15:7b:51:2d:
47:1c:46:89:0b:0c:fc:41:53:e8:12:27:48:ef:0b:
fa:e1:56:f4:c3:31:62:00:ca:86:d4:1c:ad:8b:93:
8c:aa:7a:d4:1e:77:0b:53:b8:6b:74:e0:23:2f:75:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:05:4B:9D:AF:F8:8E:B1:40:3E:50:FA:B5:05:50:09:85:85:B8
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:cc:32:8a:41:b1:e5:8d:3a:9b:d7:67:fc:00:0a:e9:6d:
82:a2:ee:5b:80:d4:98:d4:84:c9:9a:23:e0:e8:a3:d8:9a:88:
46:fd:dc:c8:77:a2:73:4a:3f:84:e4:86:12:68:63:9e:9d:d6:
e2:e6:94:cc:70:d9:ff:ba:38:57:5a:b5:83:94:f8:d6:9a:87:
b3:6e:80:56:53:ba:a7:0c:24:7d:45:b0:dc:02:60:78:1c:41:
c8:de:ad:ff:91:07:7d:7f:bc:c3:59:42:53:ee:94:6a:87:61:
4d:7e:9b:78:98:8b:5a:1f:1e:9d:28:98:24:1d:c5:62:d8:ad:
f3:94:8d:c4:67:2b:26:d2:53:98:6d:41:17:65:89:b5:d1:35:
76:ed:f0:1e:62:14:f4:e7:d7:73:fe:f7:ed:e1:ba:0e:a3:38:
f4:b3:94:bb:83:c0:82:77:97:92:12:e6:84:6b:2b:61:1e:44:
c2:cf:b7:b7:5d:5a:f9:c3:50:e0:59:fd:99:74:14:e6:fc:80:
06:e6:24:9d:7d:6a:c3:59:5a:42:dc:c5:6d:b8:84:c9:31:96:
5c:90:32:8a:12:5a:56:c1:a9:78:9d:36:46:84:bd:c9:07:d3:
d0:0e:a3:ff:d9:35:ee:2e:b0:6b:b3:ca:97:67:9c:22:d0:e1:
e0:65:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:02 2025 by rpki-client