Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: xH94UQY8+c2VU0X2QuvBFQ8KkcAZHi/NQQTJFP/Xuk4=
Subject key identifier: 6E:12:64:B2:86:BF:DF:DB:0B:E6:DA:A7:45:F5:83:25:01:E4:18:1B
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01976C2A957C198067A4B22A3A9822598611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 02:00:19 +0000
Manifest this update: Sat 14 Jun 2025 02:00:19 +0000
Manifest next update: Sun 15 Jun 2025 02:00:19 +0000
Files and hashes: 1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 6fBpc9RPtY7uNDfzgEwySubVZFTQyFlFNL6W7PZTNQc=)
4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:95:7c:19:80:67:a4:b2:2a:3a:98:22:59:86:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jun 14 02:00:19 2025 GMT
Not After : Jun 15 02:00:19 2025 GMT
Subject: CN=6e1264b286bfdfdb0be6daa745f5832501e4181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:fb:f5:91:db:f6:cf:92:4f:67:0d:ac:64:
27:cd:8e:e0:29:37:6b:94:28:9c:aa:00:3f:e5:55:
28:17:e2:d0:d3:09:fb:32:70:4e:ba:22:99:ed:3b:
be:86:9b:13:26:03:e1:c7:9a:cf:16:1a:be:f9:d0:
d2:10:d6:6d:ae:a5:b0:b6:ea:53:61:8e:cc:d6:52:
70:42:de:ee:55:cf:e6:43:4f:1d:8a:38:b8:b3:18:
c5:ae:51:7a:dc:4e:f1:bc:25:f5:f6:f5:2d:8f:62:
05:3d:87:46:d3:26:23:e7:59:ee:78:da:a4:90:00:
c3:71:c6:b2:fb:23:6c:e9:38:c1:40:d5:f6:e2:bb:
83:47:d3:18:bf:74:43:d5:b6:71:36:39:6f:d6:e0:
83:36:02:cd:48:21:e9:37:fe:ac:83:ef:af:77:df:
be:47:74:8d:a4:77:ad:72:75:98:f9:7b:31:92:04:
e7:0d:91:78:7e:3a:8b:1d:87:89:01:14:7b:44:7a:
86:fd:6f:06:2b:a4:76:26:5f:cb:82:85:c2:66:4b:
59:c9:76:9e:10:48:9f:d4:54:df:e8:73:df:5d:e2:
f9:f4:48:ed:38:7a:b8:53:ce:72:c9:48:fe:f0:05:
b0:01:bd:35:2d:e5:7e:28:d1:fd:a3:c2:24:12:2a:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:64:B2:86:BF:DF:DB:0B:E6:DA:A7:45:F5:83:25:01:E4:18:1B
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:82:97:be:10:02:c0:f5:f2:84:2d:e1:14:24:a9:3a:18:15:
25:32:49:f9:60:24:41:08:60:5a:e7:99:89:34:6b:1d:40:d9:
d9:b3:ae:dc:b7:13:9d:79:e9:4a:c5:0d:83:87:6d:6f:87:22:
25:a5:67:01:82:ad:10:f5:6f:28:80:cf:1b:6d:e4:59:8d:4e:
0b:2e:b5:58:8c:24:13:b0:82:8e:ac:3b:75:d5:03:80:f7:8e:
b8:8a:a6:1a:a6:09:98:bf:89:6c:f6:06:dd:89:96:bc:05:e8:
25:36:65:1c:83:0f:d1:39:b1:13:45:83:06:59:54:a2:b4:1d:
7b:c8:ae:d1:ac:c0:41:b9:bf:ad:0a:cb:e9:59:26:18:2e:7d:
88:b7:43:48:cb:4a:26:82:4c:61:6d:83:54:09:76:6d:22:5a:
3f:85:c5:4a:99:7b:37:9f:7e:ce:1a:32:0b:e1:c3:1b:41:60:
48:30:ee:9f:31:e1:91:43:92:0a:e3:03:e7:3b:90:9a:95:4e:
c5:58:08:54:e2:b1:ef:54:57:c5:33:b8:9c:dd:af:c2:5b:5c:
49:23:f6:12:18:00:d2:d5:81:86:5b:06:22:6e:85:ad:bb:8e:
3e:b3:0f:63:10:1c:5b:d3:36:e7:f4:1a:3b:d6:39:74:74:98:
78:67:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:16 2025 by rpki-client