Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
File: k0S0h58Z7nGaNRRjABcm9obWWe8.mft (raw, json)
Hash identifier: 270mie7WaEddORKwG6ATOLvXV7I0zRUdeTwVyn4FdDw=
Subject key identifier: 2B:44:C4:10:FC:39:A7:F3:CB:22:0A:C1:CF:AB:3B:53:57:FD:D7:E0
Authority key identifier: 93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
Certificate issuer: /CN=9344b4879f19ee719a351463001726f686d659ef
Certificate serial: 019849D2F57988D3A4D9068E5053592C4CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: Sp6LS-Lr7aNgCkiG-x4vIYL0m7M.roa (hash: 4a/RW16MYDyNLA++zl3ynSiVWGswaNsaMa2lua4RkWg=)
2: k0S0h58Z7nGaNRRjABcm9obWWe8.crl (hash: wY1QbUXfxYMFdN7kydLHrzhGRDzuRCic4OtjYTRNv3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f5:79:88:d3:a4:d9:06:8e:50:53:59:2c:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9344b4879f19ee719a351463001726f686d659ef
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=2b44c410fc39a7f3cb220ac1cfab3b5357fdd7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:58:b0:0c:8a:91:2a:37:0b:5b:c9:ea:a4:
d3:74:94:8a:ec:55:10:8f:0a:17:62:ab:c1:2c:73:
24:e1:d5:e4:a2:ff:8a:86:7a:b7:32:49:6b:da:d9:
8d:0e:78:e1:4c:de:2e:67:dc:ad:bc:10:07:63:71:
cb:25:f1:70:11:03:45:bc:c4:c6:e1:5c:f0:9f:d5:
98:86:08:0c:d3:1a:a3:68:73:09:06:59:ad:21:d0:
a7:c4:85:c8:c3:55:15:f9:77:87:e6:98:cd:38:b4:
ff:f7:c1:96:e9:8c:df:a8:dd:fe:31:37:66:08:8d:
d7:36:8d:3a:01:8c:19:89:49:3a:11:da:7b:96:84:
22:9f:c8:57:4c:4f:43:d1:7c:79:79:06:19:9a:2c:
68:67:11:51:e5:8e:a1:8c:da:ae:8a:56:f5:5e:6d:
71:e4:18:7c:3b:1d:73:37:8b:86:68:65:19:ff:95:
3c:09:5f:ec:d8:b9:7f:1c:8d:23:52:f0:ed:5f:85:
d7:10:d4:4b:4a:ee:b1:6b:a4:77:d2:4d:89:30:54:
09:18:52:f4:c2:3d:2a:1c:4f:47:f9:fc:b0:0c:1e:
ac:a3:da:5f:5f:a6:01:c7:48:e6:5a:76:8c:22:99:
f5:db:ae:cd:df:7c:fc:d2:3f:4d:03:48:40:86:e6:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:C4:10:FC:39:A7:F3:CB:22:0A:C1:CF:AB:3B:53:57:FD:D7:E0
X509v3 Authority Key Identifier:
keyid:93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:84:62:72:70:a3:ae:36:91:50:e5:57:54:c8:96:c9:3c:
e0:ce:2f:24:13:6c:b8:ce:11:65:d6:5f:73:d5:6e:99:c8:04:
0a:a0:39:e2:bf:57:4a:01:8c:18:73:e3:43:fa:dd:38:8b:09:
bd:1e:40:81:30:86:7d:64:e0:81:f9:c0:2b:71:cd:5e:85:22:
be:05:95:8f:3e:5b:5a:a3:e8:39:e4:00:48:84:80:bb:7b:ed:
5f:21:2b:1b:20:90:16:38:44:33:33:76:6f:10:41:51:06:59:
43:ad:cb:0d:0d:29:b1:df:4f:d6:a3:3f:34:c7:9f:93:78:b9:
a2:47:5a:05:4c:d2:18:41:79:f5:ed:5b:a7:0e:17:9a:51:e2:
67:e5:32:ad:cc:ce:79:0b:14:2e:81:43:4d:dd:e9:24:d8:f5:
ce:fc:fb:42:5b:03:7c:72:27:45:d0:cb:09:f2:e6:fa:a3:d1:
cb:9b:d2:5f:d9:ae:6e:28:9e:70:80:c1:d3:d7:c5:62:1e:fc:
19:65:53:69:8e:ea:52:14:cf:c4:ea:a6:52:d8:14:34:0f:21:
f5:08:ba:82:7c:ac:e4:b4:96:77:7d:67:13:d2:68:43:0f:1a:
23:88:3d:98:0c:23:56:bd:dd:31:75:35:c0:00:76:09:e9:52:
9a:f0:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:14 2025 by rpki-client