Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: sr/V1vH3ytbIysXV8hnMbS8gno1LiIAUq+03dZBDQLI=
Subject key identifier: 24:1E:F3:D4:BC:66:3A:88:17:25:42:FD:B3:4C:AD:27:B9:33:B0:24
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01976C989A659301C164D6D39D47A97F3273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 06A9
Signing time: Sat 14 Jun 2025 04:00:29 +0000
Manifest this update: Sat 14 Jun 2025 04:00:29 +0000
Manifest next update: Sun 15 Jun 2025 04:00:29 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: O1y5m4ga+K4REKt+/eGSTKqHE2R4twjMHSy7OnuHpOU=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:9a:65:93:01:c1:64:d6:d3:9d:47:a9:7f:32:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 14 04:00:29 2025 GMT
Not After : Jun 15 04:00:29 2025 GMT
Subject: CN=241ef3d4bc663a88172542fdb34cad27b933b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:6d:08:35:1a:9c:b5:d4:d9:77:8f:57:e3:
05:28:0e:6a:c3:f8:1f:ec:cd:09:08:1e:85:e2:e6:
3c:72:c8:7c:b0:8b:51:c8:fe:4f:e2:56:a9:7f:d8:
8f:96:88:83:e6:d1:0c:e2:88:7b:7d:60:83:44:ff:
c5:83:f5:1a:8d:9f:4e:3d:bd:63:8c:24:16:dd:5d:
83:dd:c6:f1:2f:b8:e7:65:f7:fe:dd:2d:17:af:ce:
ff:ab:0c:94:53:9f:db:cf:0f:75:9b:38:de:ae:50:
4c:e0:c1:37:f6:e7:71:e6:9c:59:95:d5:cc:b2:dd:
23:18:28:d8:9e:10:13:9b:da:d9:43:06:68:fb:15:
92:1f:c0:44:e1:27:69:ba:53:e9:6d:64:86:7a:0c:
d0:3e:4a:0f:01:96:88:5a:aa:58:c7:28:29:90:64:
93:19:14:c2:93:00:40:d6:f6:ac:d3:39:ce:ba:24:
72:32:dd:23:ac:17:dc:bf:08:56:19:f6:d4:bf:7a:
95:ae:aa:1a:46:3d:82:d4:70:ea:a4:4a:4d:4c:33:
99:aa:86:56:7d:19:12:2b:1a:74:49:01:6a:5f:6c:
ac:5d:98:54:a4:91:0c:09:3b:d1:80:c2:4c:c3:b3:
35:0a:1f:ff:bd:7c:89:a2:f8:67:17:b0:14:7b:4f:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1E:F3:D4:BC:66:3A:88:17:25:42:FD:B3:4C:AD:27:B9:33:B0:24
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5a:92:c7:cd:02:81:33:29:6f:a5:97:5a:ed:94:12:14:c9:
56:f1:03:3a:c1:66:74:54:16:25:59:cd:3e:cf:c3:22:fb:72:
d3:12:eb:01:3a:b3:f9:e9:d9:de:23:c3:64:d1:c7:40:1c:3a:
0c:99:55:5d:3a:33:a0:62:9f:ff:38:43:7a:85:49:6d:48:97:
ce:da:e6:34:9c:ad:2a:56:51:27:04:86:44:52:48:fe:5c:f3:
50:b4:57:37:e5:7e:b7:f4:fc:ed:a5:ed:c0:be:d3:ed:ed:cc:
e1:fd:01:ed:3f:66:e2:ee:82:7e:f0:bb:d3:88:5d:6e:83:9a:
91:17:f8:6c:c3:f6:ac:7c:c5:3d:cd:6f:82:42:9b:fe:4c:c4:
84:0d:41:5f:f1:a5:86:39:f9:dc:9b:33:1d:e1:91:c1:74:ef:
28:a8:e5:1a:fd:ed:ef:1e:58:f2:15:0b:e2:6d:b4:41:9c:22:
18:3c:26:4a:ec:2e:32:92:8c:63:11:08:c5:cf:45:8c:86:f2:
5e:74:49:38:f8:54:87:ad:3a:cc:cf:15:4f:d2:24:10:01:ad:
6a:f7:40:a3:82:58:ba:17:d4:8c:94:d4:98:d1:42:85:12:71:
91:86:c2:38:46:28:6d:d5:98:d1:8c:0d:90:2c:4b:bf:1e:60:
af:10:ab:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:19 2025 by rpki-client