Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: wk0tTrdOR23ieKtlJQXbO7YpUif+HhZ3yViukyvNLxY=
Subject key identifier: 38:42:AF:A4:5F:0B:9A:C7:15:76:D1:A7:DC:35:AF:D8:F9:DF:85:EE
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 01984A77DD2C02673937A7CAE2F28BF1C0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 12FC
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: xgK7mkfsXzsAUY0Jen+8tybsB9GAwfJ8sxnze01MlQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:dd:2c:02:67:39:37:a7:ca:e2:f2:8b:f1:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=3842afa45f0b9ac71576d1a7dc35afd8f9df85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:97:e9:e0:bc:c9:e9:b2:13:3a:71:c6:63:
15:f0:f4:d9:44:e1:06:49:db:af:20:bc:ba:d8:ad:
58:e0:01:f7:5d:cd:10:08:c4:83:3a:09:ca:4d:aa:
83:ea:8e:d6:fd:1b:46:0a:b0:c8:eb:80:94:00:95:
fc:38:58:ae:78:2f:91:3a:e6:70:94:3d:f0:9c:e5:
4f:99:19:6f:2a:68:4d:4e:42:23:fb:ea:e8:71:8d:
5c:9e:26:b3:bd:fa:53:52:e0:a8:82:52:2d:03:80:
c7:f0:3b:88:6f:6b:47:10:5f:1f:6d:ba:4e:73:96:
43:18:81:a7:65:54:8e:84:ca:13:5d:72:37:1a:9d:
0b:4e:5e:e0:f3:26:a7:3a:88:eb:5a:91:b2:79:73:
5d:e7:4e:cb:eb:c5:4d:c8:38:1a:7d:42:85:0c:45:
8c:8b:82:23:c8:c9:23:9a:07:44:db:7d:b3:9e:c4:
98:77:68:02:9e:c8:b3:d0:33:02:dd:bf:82:6b:38:
4a:2b:32:2a:bf:0a:a8:c5:0a:52:6e:c3:52:ec:0b:
ed:0a:e2:14:d3:12:fa:ac:85:7a:0f:0f:b4:58:db:
16:19:47:ea:40:af:5d:8d:58:96:20:ce:33:52:a3:
65:fb:9e:0b:ce:33:78:31:0b:27:27:5a:98:b1:92:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:AF:A4:5F:0B:9A:C7:15:76:D1:A7:DC:35:AF:D8:F9:DF:85:EE
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:60:da:ac:22:df:00:cd:26:84:42:d9:81:75:39:7e:ef:
9a:14:f3:f0:4f:0e:63:87:58:85:d6:f9:b6:63:33:0e:ff:aa:
ff:6a:16:31:0d:ff:d1:98:f0:1e:c4:fe:72:07:fb:39:69:40:
43:3c:a1:e0:4c:2d:6c:78:88:c7:93:b9:c3:94:6a:fd:64:c1:
fc:d7:81:c3:b2:5e:44:e4:89:3c:08:97:f4:25:0f:7d:d1:9b:
1d:53:13:9a:38:17:a2:5e:33:35:44:85:13:d7:f0:50:b7:4e:
46:6a:82:84:08:4c:75:8a:52:1a:26:da:53:b6:87:de:5e:d7:
1c:e1:31:03:56:e4:18:30:bc:fd:e4:76:17:32:68:f5:6d:1a:
0b:e5:7c:fe:18:df:f5:2b:ce:fd:e4:a0:70:3b:79:f9:54:39:
b1:31:30:e6:93:bf:d7:6b:fe:37:a4:7b:e6:f0:60:b6:b5:58:
65:52:f2:18:59:5b:0f:4c:56:6f:69:17:4b:10:53:8c:4c:df:
2e:a0:31:e6:7e:71:c7:13:55:42:b0:6a:f8:53:42:47:27:43:
62:e7:e0:81:93:f0:13:4f:0b:98:18:71:bc:5e:eb:7d:07:ca:
52:1f:bc:32:76:b4:d9:d4:3e:12:cf:66:5c:26:1b:66:7a:60:
1e:bb:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:56 2025 by rpki-client