Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: 9xYYeQeRy6K1glpSUndQsRvNCy8ufVSXpTg9I/DwrgY=
Subject key identifier: C1:B2:AF:19:35:C0:EC:90:A3:F1:F6:D6:BB:13:58:27:B0:7E:58:D4
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 01974B563281D96C56472C1A07BB8D8B57D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 120F
Signing time: Sat 07 Jun 2025 17:00:29 +0000
Manifest this update: Sat 07 Jun 2025 17:00:29 +0000
Manifest next update: Sun 08 Jun 2025 17:00:29 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: fPSKewtnce3DFnroF21RN65/BUMU9E85A1urHYqX2nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:32:81:d9:6c:56:47:2c:1a:07:bb:8d:8b:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Jun 7 17:00:29 2025 GMT
Not After : Jun 8 17:00:29 2025 GMT
Subject: CN=c1b2af1935c0ec90a3f1f6d6bb135827b07e58d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:96:ec:df:6d:2a:a1:f9:a3:31:04:7c:73:
a0:a5:7b:0b:63:0c:ba:a9:6c:cb:20:7f:2a:1c:14:
d6:e5:f2:2b:0c:63:66:fc:3e:1c:cb:86:03:4d:28:
01:64:fd:b6:0e:7e:96:c2:dd:ec:7e:a7:24:af:ac:
4f:f8:5c:60:15:bf:bf:94:8f:67:cf:4d:be:aa:58:
7d:b2:a8:2f:39:10:32:15:24:28:57:f3:9a:0a:9c:
11:d6:0a:be:99:89:77:9e:bd:5c:b0:ba:06:8b:12:
01:fc:30:a2:99:7f:6a:00:21:e1:bf:c8:30:d1:c7:
a0:42:ec:f6:24:25:32:c1:c8:cf:3b:6c:d2:c4:a7:
df:cd:1c:6b:9c:5e:e1:06:e3:73:79:d5:3c:d3:ed:
f5:13:ab:1f:93:e2:0b:06:79:18:8e:56:5c:38:23:
f8:89:15:04:d8:1e:71:7a:81:41:ca:f8:96:5f:f5:
28:f1:40:fe:57:6c:29:5f:ca:68:5a:cb:69:e8:31:
98:b8:42:12:14:cd:42:53:0a:48:9c:8f:32:bc:b9:
e8:46:bb:02:1d:83:f1:9f:3a:0c:99:c4:8d:48:6a:
3b:29:7d:cc:42:a4:68:15:d3:27:94:03:61:cb:ba:
9c:1b:ed:a9:d4:43:98:b2:b4:99:a0:8a:5f:e5:93:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:AF:19:35:C0:EC:90:A3:F1:F6:D6:BB:13:58:27:B0:7E:58:D4
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:98:7e:d2:c9:c1:2f:4d:4d:05:05:2e:51:1e:5a:9a:02:
d0:5b:3b:31:82:e8:fb:2f:0f:dc:95:29:a0:39:8c:7d:e4:cd:
49:86:37:c0:d8:0a:ce:1d:d2:6d:32:ca:de:2b:17:81:5d:fb:
23:34:39:24:b1:9b:da:f2:fd:16:a5:e8:eb:81:de:23:03:2a:
5a:6e:ec:45:c6:04:84:95:a0:00:c8:11:8b:7d:89:77:4c:21:
d6:90:13:0e:e3:43:46:c0:22:86:33:2c:06:4b:16:e1:42:9c:
d3:bf:b6:b8:8b:d3:82:40:ae:08:c1:12:38:42:2f:81:52:02:
c3:d3:51:7d:1d:3a:de:4a:e1:46:a2:ab:67:20:fc:39:30:f1:
34:50:54:b1:e9:3b:0a:a6:37:83:e8:fe:ca:7a:75:40:94:82:
38:1b:c5:97:1c:23:91:9e:b9:20:81:87:3c:46:3a:1e:9a:fb:
6c:0b:d9:1c:63:cc:8f:43:c6:39:da:9f:81:b7:e6:aa:da:c8:
96:78:e3:da:50:79:df:04:84:6e:b1:ec:b1:42:ea:02:a2:ee:
ed:8a:70:ec:22:02:30:eb:34:96:1c:6f:94:24:7f:9c:89:ec:
2d:59:f2:d0:73:68:66:ab:31:df:85:96:6b:74:74:30:af:3d:
a4:98:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:43:57 2025 by rpki-client