Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: rkqLWVroNfMavYWuD/M5ePjNRePBmCIOz54CKrCqVg0=
Subject key identifier: 68:54:DE:38:B5:26:09:C0:AD:D1:A9:F3:55:C2:28:51:DA:8C:3E:CF
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01977075A1A2BA7E5010E9E6C5FDAF49773D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 22:00:46 +0000
Manifest this update: Sat 14 Jun 2025 22:00:46 +0000
Manifest next update: Sun 15 Jun 2025 22:00:46 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: lmbk87Vgwe/4y940TuBC9OnJX+tYLuOYq+K/5b8lBFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:a1:a2:ba:7e:50:10:e9:e6:c5:fd:af:49:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jun 14 22:00:46 2025 GMT
Not After : Jun 15 22:00:46 2025 GMT
Subject: CN=6854de38b52609c0add1a9f355c22851da8c3ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:08:7a:d5:d6:d0:c6:a8:1d:4e:b7:93:bd:
33:d7:22:c3:d4:c0:e9:bf:da:e7:47:ab:3d:f8:d2:
38:fc:2a:b6:20:47:6c:37:be:e8:0d:e9:5f:fe:4e:
84:8c:c2:61:03:43:c9:6e:58:73:7e:38:9a:f5:95:
a7:76:d6:48:59:be:c3:bd:f0:d5:63:02:05:51:16:
22:11:db:7f:99:7e:ae:e4:7e:f2:43:6a:e1:d1:dc:
d5:28:3c:a1:b0:8c:22:5f:bd:58:45:07:71:99:26:
cb:bc:d9:89:76:5e:28:1e:7f:f5:6c:c9:30:d6:66:
07:4b:7a:88:78:f7:2b:ed:af:02:8e:2d:08:af:dd:
97:e1:5c:aa:7e:ad:64:9d:cc:00:3f:e9:62:13:28:
5d:66:6d:b6:a9:c8:7a:a1:6d:89:e9:57:0f:95:a1:
2d:51:30:c8:70:f0:fc:7d:a7:47:c9:f1:5e:9e:e5:
98:3f:bf:1f:4a:d8:fb:74:ea:2b:31:19:62:c2:b9:
b3:a4:58:70:d2:57:bc:b4:f2:ab:76:62:7c:e0:f5:
55:6e:90:4a:92:3a:de:a5:16:ab:11:b0:29:6a:20:
8c:08:2c:43:5e:c1:a5:3b:c4:94:a0:de:c5:fa:96:
ac:de:c6:b4:02:08:5d:d8:16:36:4a:9c:df:bc:5e:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:DE:38:B5:26:09:C0:AD:D1:A9:F3:55:C2:28:51:DA:8C:3E:CF
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cf:29:88:b4:54:52:20:4f:63:93:f4:d2:23:2f:ac:84:da:
77:dd:89:42:a0:ee:61:33:65:48:50:15:3c:5c:3b:a1:2e:b1:
37:28:fc:4f:79:7a:65:4a:a5:9e:99:92:53:16:59:fe:45:f4:
ca:9a:8d:c0:5a:fd:d6:7c:ae:48:1f:da:34:76:8b:95:26:34:
18:d0:12:e3:9f:ac:a9:17:0b:d5:96:fd:a5:ce:8b:13:c5:8b:
6e:3f:4a:76:eb:90:5b:a5:a8:d5:c5:74:c7:d3:25:70:db:a0:
e3:72:a8:93:f9:f8:3e:c9:9c:0e:a8:4b:4e:ff:b1:40:03:89:
40:4c:6c:ce:a1:c3:e4:bf:19:8f:2f:1c:cb:3e:0b:42:8f:bf:
92:6b:bf:63:a1:73:c8:0f:a7:c9:a3:8b:62:cc:c2:9b:d6:78:
ee:62:be:9b:3d:70:91:90:b5:45:57:3f:66:93:8a:1f:93:35:
c5:5f:61:e3:d6:e6:a4:bc:da:eb:07:ba:70:ec:5e:21:90:da:
63:c2:73:06:c1:89:1e:a7:30:b7:de:5f:db:81:00:bc:be:28:
92:e3:89:20:9c:3a:03:fa:28:7d:91:3c:db:e6:54:40:8f:49:
ed:9f:7a:4e:3a:c3:9d:57:cc:76:1c:db:64:c4:d8:ce:82:0f:
e9:fe:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:32:03 2025 by rpki-client