Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: I3zmj8Oz1ELfqNI0JvchBP+fY11KKobuOQZ2e12zyxM=
Subject key identifier: 7D:45:7B:94:80:72:09:60:73:BF:9D:09:7A:EF:D1:6A:35:3C:A1:D4
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019778663440A13D3FAC4AD4215865A2AFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 11:00:53 +0000
Manifest this update: Mon 16 Jun 2025 11:00:53 +0000
Manifest next update: Tue 17 Jun 2025 11:00:53 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: VXwV8wwSNmz6MjxSgsKol1Fuummk7rKKUJ4rUPBtnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:34:40:a1:3d:3f:ac:4a:d4:21:58:65:a2:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jun 16 11:00:53 2025 GMT
Not After : Jun 17 11:00:53 2025 GMT
Subject: CN=7d457b948072096073bf9d097aefd16a353ca1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:29:d0:8c:b7:99:1f:e8:d6:6e:51:b9:aa:
37:0d:b4:e2:97:5a:89:6a:27:dd:72:c5:7f:19:b0:
1c:1b:86:e1:30:1e:4a:a4:48:29:ba:1e:a3:06:b9:
46:90:82:ca:d6:cd:80:6e:97:5c:75:8f:0e:53:1c:
ba:80:0b:cc:dd:0c:ff:95:7e:8a:aa:b4:b2:16:06:
77:86:4b:f3:b8:f7:b5:7c:f0:79:3d:d2:5c:81:85:
64:35:d0:58:65:30:76:99:0a:eb:e5:2b:b1:f3:8f:
d3:1a:cf:63:12:34:c7:67:08:68:c0:6c:8e:2a:78:
d9:dc:f5:b1:64:45:04:da:a5:80:68:3d:7d:b1:43:
ba:d7:02:d8:c6:6e:4f:19:09:ce:a8:5d:65:66:e1:
28:dd:d1:7e:36:07:f4:7d:52:ae:f8:4e:82:a6:e8:
ec:3e:43:25:f9:28:c1:39:55:1d:b9:bc:8e:fd:0c:
cc:6a:d6:5e:f3:6b:79:ff:fe:e3:21:ab:4f:ac:e6:
c7:d8:a0:f5:92:ee:f3:33:dc:f1:51:93:e4:97:1c:
43:46:3a:32:48:b9:5d:eb:c6:7a:6f:41:6e:ca:45:
16:0e:53:da:b0:06:b7:71:41:4d:45:31:a2:32:36:
b0:d8:ab:15:6a:dc:d8:2c:ac:c3:bd:a7:11:00:94:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:7B:94:80:72:09:60:73:BF:9D:09:7A:EF:D1:6A:35:3C:A1:D4
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:80:29:b9:0a:dc:ea:96:e7:4f:89:69:14:7b:c7:7d:6f:
91:e2:36:2c:d0:fe:ce:3c:c8:1f:70:09:af:95:91:26:93:99:
f4:5c:86:83:d7:69:d8:6a:75:75:00:af:de:8e:3d:19:58:d7:
f1:ea:7f:23:55:da:d4:e4:74:d7:18:4a:66:4b:61:14:80:49:
6b:c1:99:de:cd:f6:ef:97:39:8c:70:ef:f3:7c:99:5d:94:20:
f4:a4:f5:1d:da:10:1d:cf:02:68:a3:f3:96:5b:a9:61:b1:d4:
d8:1d:e2:81:8d:07:85:9f:03:d9:9b:1a:51:2d:49:ef:5c:04:
de:87:ea:03:23:ff:15:63:db:9b:71:75:40:1d:9f:52:d3:3e:
1a:19:65:06:ec:1b:de:8c:0a:df:6f:a9:b4:f2:af:97:3a:70:
25:79:0d:9d:f3:65:b8:03:ce:e9:fd:e1:1b:e3:1c:0a:b3:0f:
cd:e9:d9:f4:c0:d7:1e:60:73:9e:eb:ad:c7:e1:61:2a:d3:71:
63:41:d2:67:91:92:2e:e2:07:28:2f:15:28:cf:5c:b3:8d:19:
59:d1:00:24:ea:99:26:02:7c:72:12:42:17:e8:31:10:f8:40:
97:4e:41:28:26:b3:7a:61:30:2e:4a:e3:25:74:83:f6:a1:92:
c3:28:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:37 2025 by rpki-client