Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: 4VSOJO0isD0NbVhIezWUn9mGlX7pqG20MZS8NbreXUA=
Subject key identifier: 1D:08:5A:DB:49:1E:7E:C1:F8:0A:B7:46:DD:EB:A9:88:D3:DA:B8:45
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 01977B3072C2B107D08F2A8D8D461E8F1D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 00:01:01 +0000
Manifest this update: Tue 17 Jun 2025 00:01:01 +0000
Manifest next update: Wed 18 Jun 2025 00:01:01 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: MVE8m/Et7ky04GYjGz9JUAHW32j1fU99GwwN9xFwWq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:72:c2:b1:07:d0:8f:2a:8d:8d:46:1e:8f:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jun 17 00:01:01 2025 GMT
Not After : Jun 18 00:01:01 2025 GMT
Subject: CN=1d085adb491e7ec1f80ab746ddeba988d3dab845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:0e:18:57:8d:39:6e:7f:bb:5a:a5:7a:03:
59:d0:8b:e6:2f:c7:32:a5:ec:07:1b:e0:08:45:69:
21:51:e8:03:dc:bb:0f:0d:b8:3c:00:d5:bf:34:6f:
7d:3b:42:46:eb:95:0c:0f:ba:0f:b5:b5:c9:d3:72:
63:e6:90:b8:bc:fe:c3:f3:67:85:dd:79:c2:09:18:
d2:eb:fb:03:2d:83:af:48:7b:9c:2b:54:dd:56:02:
92:b5:2b:89:db:00:98:65:2b:79:c5:00:78:15:c8:
f8:da:1d:e7:00:5f:69:71:a3:c6:44:72:0b:36:08:
b0:fe:f1:e7:31:e4:ba:dd:fa:ed:b4:e8:8f:0b:b0:
58:26:84:21:99:80:88:4f:74:eb:a4:8c:33:d4:f2:
77:ff:11:79:c2:93:a3:69:0c:3f:7c:91:cf:f1:24:
ff:d2:14:a9:22:92:38:6c:32:1c:b0:2b:38:58:4c:
12:21:8f:d0:88:e7:95:d3:28:49:91:5a:33:2e:1a:
96:f6:01:18:88:16:d6:03:b2:35:9b:8a:7d:53:b7:
44:a9:dc:cb:d4:16:7c:e2:b5:20:06:a3:44:fa:a8:
d2:46:d2:95:9a:bb:52:91:d7:9f:54:b6:f5:b5:be:
a0:0f:bc:20:1a:0c:01:8b:29:1f:73:f5:ae:ce:40:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:5A:DB:49:1E:7E:C1:F8:0A:B7:46:DD:EB:A9:88:D3:DA:B8:45
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7b:4c:3f:49:2c:50:07:6f:4d:22:1b:53:eb:79:93:c1:f2:
f2:d4:07:49:1f:de:5d:49:83:33:19:b3:f0:4d:11:3a:69:57:
d7:9c:a9:6c:69:34:04:8d:16:9f:ce:8e:4b:58:e0:47:09:57:
75:45:2a:b5:83:cb:30:6e:2f:5f:4c:1e:1e:b6:70:02:77:67:
1a:5f:2d:d2:24:47:4f:04:b6:d0:4f:04:6d:c2:de:8c:ec:0e:
73:23:54:8b:98:94:8c:64:cc:d3:db:2e:53:6c:7d:f5:c5:3d:
33:49:fe:32:7b:ab:14:99:e2:a0:01:ef:a7:b0:38:d4:59:38:
66:fb:eb:8e:3a:a3:92:b6:76:a6:4a:9e:6e:c9:95:c8:0c:a5:
47:c4:23:7a:9b:7d:2b:c5:a9:57:d2:10:be:9a:1a:0e:e2:14:
32:ed:5d:03:05:b2:49:10:ca:a9:c6:0a:9c:28:5a:81:ef:47:
37:9f:08:23:96:5d:a6:bd:ea:fc:c3:9e:88:31:96:d8:05:06:
97:f9:ef:57:9c:a6:1b:45:64:7e:64:ef:62:48:e2:f1:4f:b9:
d0:eb:c5:40:f4:a0:06:a6:70:84:8e:12:a6:bc:ed:22:e0:3d:
eb:1e:bb:4a:13:55:6c:fe:c1:55:e9:cc:4f:1f:20:96:23:f6:
1d:d9:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:38:07 2025 by rpki-client