Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: MyzPfUIcGAkzekkrCBOFUC+Y5/dNwzM9JITeiihPYp8=
Subject key identifier: 10:A4:05:DB:1D:50:EB:CA:BC:F2:2D:1D:39:47:01:28:B0:F7:6A:41
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01973CF6928EED83DC961D530FCD1047AD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0A96
Signing time: Wed 04 Jun 2025 22:01:21 +0000
Manifest this update: Wed 04 Jun 2025 22:01:21 +0000
Manifest next update: Thu 05 Jun 2025 22:01:21 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: 0SCr/rDddPrwCGRaSRg9dfigR0caOX47uwweCxUfSP8=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:f6:92:8e:ed:83:dc:96:1d:53:0f:cd:10:47:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jun 4 22:01:21 2025 GMT
Not After : Jun 5 22:01:21 2025 GMT
Subject: CN=10a405db1d50ebcabcf22d1d39470128b0f76a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:a0:92:eb:58:f6:64:9c:71:21:5d:ab:63:
e4:78:3c:41:fe:83:0f:b7:58:dd:92:34:91:09:22:
f3:f6:03:41:26:e0:96:be:86:48:a2:fd:4f:fa:28:
06:ec:4d:ca:df:74:c0:20:bd:e5:2d:cc:01:d4:b4:
a4:16:cd:93:13:5e:47:b5:68:72:3f:3f:2c:8e:f2:
8e:88:34:9a:1c:36:8d:61:71:61:05:9f:ff:22:d5:
84:58:a0:a9:47:70:93:35:7e:48:f9:ae:04:ce:0d:
9a:56:df:66:80:a7:aa:b3:1c:5d:0b:3f:24:ab:e7:
97:b3:14:9b:4b:e6:f4:b1:b4:b3:5c:eb:99:73:db:
ed:75:ce:b4:d1:a0:42:68:34:22:1a:1d:be:f5:2c:
40:90:82:04:c8:21:e4:3e:6b:28:ab:64:de:aa:56:
87:09:39:57:25:69:b4:4c:d3:90:92:79:45:ba:c9:
36:51:57:3f:6b:e8:fd:07:62:85:e9:41:75:88:c6:
e7:dc:ca:bf:9c:72:93:19:51:99:79:c0:09:6c:5f:
87:4b:dd:8b:de:d5:67:3f:53:51:02:d1:47:55:dc:
87:b7:ef:8a:e6:5a:2c:bf:fc:60:a8:0d:36:77:54:
3a:88:6c:0b:86:99:a5:2e:b2:b1:cb:30:12:1c:7f:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:05:DB:1D:50:EB:CA:BC:F2:2D:1D:39:47:01:28:B0:F7:6A:41
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:b8:cd:94:7c:69:5c:2d:59:28:67:8b:a8:9b:e6:f1:a7:
dc:06:50:cd:66:d6:1c:f6:4f:f1:13:dc:0e:60:a1:a3:3a:f2:
9d:7e:01:2a:7f:45:c9:e5:db:90:12:2b:15:2d:a2:f0:73:5b:
20:6f:8e:2c:84:2e:25:fa:10:97:f3:7b:c3:48:34:83:d7:7c:
6d:43:50:31:e8:08:92:d5:20:55:46:0b:ce:53:9c:48:cb:b7:
e7:07:86:7d:37:30:ce:65:76:7a:6b:5b:65:3e:22:c3:f5:ee:
31:11:82:ce:83:aa:14:26:d5:0e:b0:9c:6f:f5:00:c4:e6:98:
c4:4c:61:8e:10:fa:69:a1:20:e1:ed:ad:d8:f2:b5:b3:bd:33:
b3:fc:8a:26:89:f7:38:c1:0e:9b:48:3f:5c:67:80:24:45:9f:
79:b9:a4:21:a2:42:35:24:b8:bf:a5:ef:18:a8:27:e9:03:2c:
da:59:df:81:5e:25:d7:0d:93:22:99:8d:81:82:f0:5b:72:ad:
a7:b2:9c:16:35:8b:98:38:a7:a9:1f:0e:b7:b5:4e:0e:09:ba:
fb:0c:95:a1:95:81:cf:dc:a0:fe:e9:be:6e:c8:4d:88:89:40:
13:76:d3:20:24:e2:be:6b:95:6b:79:db:d0:d5:42:5f:32:f1:
b3:d2:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:20:15 2025 by rpki-client