Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: H2M3R+U9XYdnO36exc2I1lJntSdpk/IhoO/AzbtIDcQ=
Subject key identifier: 11:FF:F9:F6:BD:0F:55:90:F1:70:4A:63:76:95:1A:70:FA:AD:BE:FE
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 01976CCF998F54FA9CC8F9C992006263AC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: PoVScuEy84nGSt/sM19AD7R4Tytl8IVzC2zOJH0eyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:99:8f:54:fa:9c:c8:f9:c9:92:00:62:63:ac:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=11fff9f6bd0f5590f1704a6376951a70faadbefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:47:9e:ec:96:49:2c:6a:e3:e7:67:5e:6a:
b9:eb:64:c1:bb:71:ae:80:6d:b4:41:d4:f0:ec:37:
33:fd:0d:4c:9e:95:bb:c0:46:c8:fe:74:d9:90:b2:
09:e4:05:13:69:bf:cb:d6:76:f8:5f:1c:a3:6d:43:
0e:a4:17:02:bd:d4:1a:e7:e1:a1:9b:05:f2:7f:cc:
42:9b:0d:0d:b3:3b:a6:06:a6:30:b0:7f:d6:63:f8:
ca:b4:08:6b:25:eb:58:53:ab:7d:ec:d0:c3:4b:a9:
e9:f5:e4:bb:58:1e:c0:8b:dd:e9:3b:c9:c0:2c:06:
17:93:c0:a5:36:6e:ff:86:e9:40:9d:f1:b3:9e:4b:
85:16:49:77:73:e1:67:4b:23:06:35:63:1c:b4:95:
6e:f5:b3:6d:5b:9d:81:4b:c2:6d:04:3d:02:f1:b5:
d0:92:86:c3:c6:68:13:e7:de:6c:a1:93:da:40:24:
ab:13:6f:bd:c5:df:8f:e6:40:92:77:81:9e:88:1f:
d9:fe:05:44:8e:20:74:44:a2:d2:dd:06:9c:6a:9f:
d9:10:96:cf:80:89:a0:f8:04:6a:0f:32:f5:29:cf:
a8:f6:ef:08:6a:be:a9:41:37:cb:e5:9b:37:b6:3e:
75:d1:50:00:bb:60:3c:10:04:b6:ca:ef:0d:cf:1b:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:F9:F6:BD:0F:55:90:F1:70:4A:63:76:95:1A:70:FA:AD:BE:FE
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b5:38:ae:86:a9:bc:f1:eb:e5:1b:ac:92:60:79:5d:eb:1f:
8f:33:88:de:c1:a4:bf:2a:46:a0:7e:2f:28:07:3f:ad:a7:23:
c8:68:8e:63:c8:d3:eb:72:de:30:ce:80:42:cd:26:c2:4b:39:
87:67:db:94:e9:70:13:af:fc:fd:b2:a4:13:22:95:5c:f2:ba:
e5:1f:e6:34:4c:0c:65:11:3a:4a:52:a3:a1:22:83:fa:45:96:
32:98:8d:53:69:1a:a6:e9:05:7f:7c:43:a1:9d:73:8e:f0:ec:
cb:10:73:c7:07:41:70:f4:bf:78:01:5f:60:df:c3:b3:e5:fe:
6a:ab:77:94:da:66:99:0d:e9:6d:18:50:13:36:61:15:96:e7:
2d:33:8c:a7:0f:1a:3f:9c:5d:1a:13:07:e0:79:a8:ed:5a:be:
4b:d9:51:b6:66:e2:25:0b:d4:0d:47:38:46:60:71:fe:22:2d:
e7:8e:ac:23:71:00:9f:29:a6:0f:d0:b1:52:b4:bb:5e:f3:90:
d2:76:28:f6:cd:ae:78:97:66:0d:56:02:e9:e4:05:18:1d:a1:
34:7c:31:0c:f8:8e:4a:94:d0:52:cc:f1:0d:ee:95:82:40:f5:
7e:b0:53:d0:c8:ff:22:b4:a3:1c:4e:da:56:cf:54:03:6c:ba:
8f:95:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:23 2025 by rpki-client