Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: QEVtnBazjYAst8bp2DDz1P8gtSLxUKwVzB0/CqLhDrA=
Subject key identifier: F0:48:A2:D4:17:7F:80:BF:88:0A:F0:0D:E3:E3:2F:0E:D6:CE:B4:B6
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019749D5D5C176753A6DFDDCCD9D5E4C9611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 03AB
Signing time: Sat 07 Jun 2025 10:00:39 +0000
Manifest this update: Sat 07 Jun 2025 10:00:39 +0000
Manifest next update: Sun 08 Jun 2025 10:00:39 +0000
Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: wyD7orbPFNYMkndGV0SiQ2o41TybHlpYrhR2IFBlzkA=)
2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d5:c1:76:75:3a:6d:fd:dc:cd:9d:5e:4c:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Jun 7 10:00:39 2025 GMT
Not After : Jun 8 10:00:39 2025 GMT
Subject: CN=f048a2d4177f80bf880af00de3e32f0ed6ceb4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:24:9a:33:c9:87:40:7f:09:d5:10:bb:cc:
5d:5c:01:24:bd:eb:da:1a:f2:a1:a0:c4:15:66:12:
1f:d9:83:79:33:ad:cc:67:ce:87:d2:9f:52:6c:09:
b8:04:67:42:7a:78:b8:a6:6e:18:7c:a0:1a:da:b7:
33:5d:0a:a7:7c:d7:78:32:8c:15:58:3a:77:02:ec:
3d:a3:6c:19:da:a7:73:47:1c:f2:2b:db:ae:71:75:
c6:1c:9d:a1:c0:a3:07:25:13:c0:9b:6c:b8:90:f5:
36:7b:ed:91:ac:46:48:e5:6b:de:ee:fe:71:36:2c:
a2:c2:64:ea:5c:e0:cb:26:f2:54:6a:44:ba:08:6c:
6e:45:4c:4e:f2:95:e3:4b:9e:33:08:4c:42:95:0c:
84:66:f9:f8:ae:ee:d7:fc:bd:11:f9:8e:75:19:b0:
94:8d:9d:c9:bf:c9:60:25:90:70:3f:78:85:6f:16:
a5:c0:f2:ba:3b:73:da:48:d2:7c:78:17:63:01:28:
6c:2d:52:b5:f5:40:32:3a:4b:84:d8:73:ab:de:cc:
2b:6a:a5:e7:46:db:12:85:0a:bd:b4:37:49:04:72:
13:e9:38:35:43:f6:57:c7:66:ad:72:29:8c:44:48:
14:50:f7:bc:70:af:d9:80:8f:80:bc:de:af:dd:6c:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:A2:D4:17:7F:80:BF:88:0A:F0:0D:E3:E3:2F:0E:D6:CE:B4:B6
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:e2:19:b2:cc:36:4b:8f:8b:71:1c:73:d2:6b:19:fb:ba:
20:39:9f:4d:7e:e2:48:e8:2e:38:09:63:5d:47:b8:71:00:fc:
cf:29:53:67:4a:d4:fb:77:e9:74:e1:69:28:f5:70:5a:46:7b:
56:15:e6:d3:b9:32:3d:68:60:fd:2a:ec:30:08:19:65:9b:c4:
4b:2f:21:e3:e5:1e:bb:a3:86:3f:ad:41:b8:df:02:8b:af:0d:
0e:87:5f:b9:04:1b:dc:ae:64:98:5b:fc:bc:85:c7:14:9e:0b:
65:36:2b:64:0d:f5:65:7e:cb:dd:2f:7f:27:82:76:b3:f5:01:
a4:57:e8:11:c1:6e:2b:9a:99:d8:ac:0f:51:a0:8a:22:fe:21:
98:4d:f7:cd:37:67:f7:31:96:52:09:2f:28:bb:17:d4:3c:a9:
cf:40:a3:65:2d:0b:4e:cd:8a:2a:a0:d2:56:db:31:5a:3e:9f:
b3:c4:dd:10:4c:d9:3d:8a:76:54:6a:86:cf:48:82:f4:9b:fb:
7b:d6:13:68:69:b9:20:3e:53:bd:a0:5b:a2:93:f9:8a:4e:22:
71:a0:2a:28:b9:21:f6:da:c8:56:b8:86:ec:fa:ee:15:c9:10:
b9:96:61:59:f2:9f:19:73:f6:c4:ef:53:65:c6:0b:9b:59:ac:
79:9b:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:22 2025 by rpki-client