Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: cXzjoqYZo7xV6LPEcbqCzqto8Fo/tzQJ3BFXzIuBwxI=
Subject key identifier: AA:69:69:8A:BA:CB:EE:07:A0:98:70:F2:93:B4:6A:67:1C:E8:11:A2
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 01974BC3E9B4DE11B425FB78BDC620B26B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 19:00:19 +0000
Manifest this update: Sat 07 Jun 2025 19:00:19 +0000
Manifest next update: Sun 08 Jun 2025 19:00:19 +0000
Files and hashes: 1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: NheHkCXbS9FgoMS87wqZdCfyZ7NaInvUJw057EqnhFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:e9:b4:de:11:b4:25:fb:78:bd:c6:20:b2:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jun 7 19:00:19 2025 GMT
Not After : Jun 8 19:00:19 2025 GMT
Subject: CN=aa69698abacbee07a09870f293b46a671ce811a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:3d:fd:69:5d:61:48:38:fd:fe:f6:e6:3d:
eb:f0:9e:48:79:b1:a1:e9:be:e2:86:53:a2:07:dd:
92:35:c7:a9:84:24:f1:ee:71:07:2c:9f:ae:a7:b4:
bd:0f:e5:c8:99:d3:ce:9e:bf:dc:6b:82:59:a5:1c:
17:18:fb:77:58:01:ed:a7:27:eb:59:2d:3d:4e:ba:
7c:4e:85:bf:da:8b:45:17:88:80:70:b3:15:1f:df:
92:0a:5b:5b:6c:6a:4a:cc:82:d3:07:81:4e:99:34:
ec:04:e8:b7:56:b6:e9:17:cb:38:f8:5a:a6:37:f7:
27:87:ff:76:f7:a7:e6:2b:8f:8b:b9:bb:99:f6:ce:
0b:c9:f1:b8:6a:7f:92:c2:c8:13:a5:87:58:bb:b7:
c8:8b:6a:52:44:5c:9b:8d:4c:c6:f3:b7:52:f1:15:
71:c8:36:f5:22:38:ea:eb:54:f1:38:7c:00:e2:2f:
2e:4e:98:60:38:24:92:13:ab:e1:d2:c6:93:50:f1:
b6:f6:c8:d5:8f:08:14:7a:00:1e:e2:37:14:c2:6e:
31:09:b4:ab:2b:4a:e6:d9:1a:7e:d7:6d:5c:23:bb:
4c:15:d6:84:13:8f:25:3c:51:38:cc:93:e0:cd:be:
4d:9d:47:9f:05:17:b5:74:75:4e:32:8e:38:e2:0f:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:69:8A:BA:CB:EE:07:A0:98:70:F2:93:B4:6A:67:1C:E8:11:A2
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:ad:d7:a4:47:a7:c8:bd:03:7d:b1:27:ce:d9:93:5e:dc:
83:3f:aa:a5:86:08:1a:4c:60:f8:b0:45:66:69:d4:a6:af:bc:
0a:a9:66:c6:20:df:f8:75:89:e3:68:52:7c:7c:78:e2:0c:f9:
b5:d3:d8:90:6c:ad:30:44:98:eb:a1:c5:5a:9e:8e:30:91:83:
0c:c4:b1:72:2c:ed:0d:b3:be:30:df:f8:3d:b7:b6:98:41:c4:
fe:54:34:54:58:c3:f9:4e:9b:7a:4b:46:82:bb:5f:62:2a:1b:
e5:fe:e2:e4:f1:76:6b:d9:d2:5a:cf:ae:cc:0e:c8:32:3b:e7:
e9:de:f0:a7:f1:52:67:05:dc:87:5a:0d:5f:52:b2:e0:cc:ef:
da:6e:a9:4d:00:c7:64:b2:fb:00:2f:72:5b:c5:69:7c:3e:59:
74:ac:66:11:f3:15:36:e2:fa:43:71:fd:a0:06:0e:0d:09:3a:
38:80:49:a7:a4:d1:9c:dd:b5:95:05:9b:6d:e8:d0:30:5f:00:
8b:a8:fc:3c:d7:65:0d:cd:66:c5:ed:5a:44:55:37:dd:cf:52:
c6:94:c1:4d:54:e0:a1:6a:7d:bd:56:1f:d7:94:c6:b0:80:62:
48:82:dd:c0:e6:00:6d:2e:d3:73:aa:a8:26:bd:36:41:54:e1:
a9:ad:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:15:38 2025 by rpki-client