Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: V4ruwc1nzma9658dmRQnyaFTVpLOO0vpCdC/M8ES3VY=
Subject key identifier: 14:12:B9:32:09:50:69:67:78:5B:06:AE:54:47:A5:62:28:C2:14:93
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019769CE9EC472759AE8FE5C7F46E4D8D2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0953
Signing time: Fri 13 Jun 2025 15:00:38 +0000
Manifest this update: Fri 13 Jun 2025 15:00:38 +0000
Manifest next update: Sat 14 Jun 2025 15:00:38 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: uq3MAPC/y/cXUePWB+C4di+PXAJJOoMIetdsFFeFY88=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:9e:c4:72:75:9a:e8:fe:5c:7f:46:e4:d8:d2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jun 13 15:00:38 2025 GMT
Not After : Jun 14 15:00:38 2025 GMT
Subject: CN=1412b93209506967785b06ae5447a56228c21493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:6c:81:c5:33:a8:a3:66:76:b5:74:d4:69:
d4:b4:bb:a3:14:72:e9:9f:ff:17:70:0f:9f:95:c5:
af:25:44:b8:15:fb:87:df:24:21:2d:ce:5d:04:ce:
89:82:7b:29:c1:6c:36:c0:5c:d9:f0:f4:76:d5:24:
8f:62:d0:67:2f:99:10:a1:63:72:d8:ce:06:6d:db:
b0:92:c8:7e:20:6c:6c:f4:e0:54:7c:1b:73:7f:2e:
1f:c1:5f:55:2d:c0:da:6e:8b:06:fd:7b:dd:da:68:
55:bb:2a:3e:53:89:9a:e3:90:90:7c:90:5b:7f:66:
54:21:b3:ab:d0:f4:5d:4b:72:4e:72:18:38:51:de:
17:07:66:12:5f:26:53:8d:11:2c:f0:8b:40:a9:fd:
9c:3a:a1:89:98:f4:25:04:96:dc:04:39:52:52:dd:
0f:4e:be:c8:a9:ec:36:95:b7:cb:9f:a5:dd:ff:2b:
c1:12:06:64:07:ec:92:85:9e:a4:5d:4c:00:65:1a:
f3:ff:01:07:d7:b9:9e:16:aa:65:b0:b9:63:67:f6:
03:12:7d:fb:fe:b4:e7:20:9f:a7:98:bf:f6:05:88:
78:b4:47:1f:42:1a:e9:1d:e8:ba:6c:5b:86:30:8e:
c4:1a:54:02:d2:4a:1c:65:11:8b:d6:85:cf:07:4f:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:B9:32:09:50:69:67:78:5B:06:AE:54:47:A5:62:28:C2:14:93
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:76:96:ff:f9:4f:f3:0f:be:dc:fc:b6:fe:4e:96:08:03:0b:
5c:ad:f5:44:1f:ba:60:1e:f2:0e:82:e6:d6:ae:dd:8c:8b:54:
7b:59:17:84:d7:41:0d:f1:c1:43:6d:64:16:f1:15:94:fa:2c:
64:da:7e:a5:56:71:0f:a2:4d:4a:58:9f:0c:98:9f:37:77:9f:
6d:77:a1:b4:28:c1:f3:3c:cb:b2:a7:eb:f5:0d:27:fc:7d:0c:
05:90:7e:a1:39:9a:96:7c:9f:9c:6d:0a:ce:2f:88:69:31:3e:
a0:ac:ad:b4:a8:30:b0:be:10:be:df:05:47:64:1f:50:49:1d:
f3:8f:f3:48:b5:4c:f8:ee:9b:83:67:9a:df:cf:7e:b1:4e:45:
6e:13:77:27:ed:89:6e:27:1f:e7:c1:90:e6:9c:fb:cc:de:24:
2f:b6:80:de:b0:4c:a9:17:e7:24:51:0c:7f:9d:76:c6:a8:af:
f0:d6:6b:49:72:34:85:96:c6:88:27:83:57:a0:76:c5:73:50:
25:7b:b9:b3:c3:fb:5d:c4:0a:fd:a4:a4:4b:8c:2c:db:dd:cd:
ef:89:ac:40:30:bf:67:77:4f:6c:34:44:ef:1a:e4:c4:03:8c:
6f:70:27:3f:c3:f7:62:64:a7:e3:f8:44:a1:1b:96:54:b6:78:
ce:c8:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:35 2025 by rpki-client