Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: alrzZloAdnh34He683RdFRg6TC3w+xszh0x8RarQLBM=
Subject key identifier: AB:96:D6:E9:98:98:07:A9:CB:43:4B:03:BC:68:65:9A:66:B7:FA:E9
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0197499F162B0B6EA29BB7701F7A6393A751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 06AE
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: v6u/a+kekwl7gkiV63ioNaWXq6fUunyeTicKCCkZXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:16:2b:0b:6e:a2:9b:b7:70:1f:7a:63:93:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=ab96d6e9989807a9cb434b03bc68659a66b7fae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:19:bc:fc:d4:aa:2c:a5:82:49:c2:e5:9d:
2f:29:83:93:e9:54:ca:a7:5e:6e:0f:d6:e3:de:02:
48:f3:2d:ce:09:ed:5f:8e:9d:86:2e:46:44:4c:39:
9f:53:0f:43:9f:e6:b3:bc:58:62:5e:2b:31:e3:f3:
34:49:27:9e:39:b9:2e:e3:82:72:a6:33:06:7d:0b:
46:9d:50:82:cc:9e:b4:36:18:d8:f2:bd:58:91:75:
a6:6a:e2:de:2d:db:ec:54:a2:a0:c0:d2:be:7b:96:
ca:e9:e9:1b:2a:aa:d9:33:1b:18:9a:e7:be:98:96:
b0:c1:42:4b:5b:60:20:e3:a4:5b:df:b9:51:e1:ae:
23:74:4e:32:3a:03:8e:ce:e3:3e:4e:16:a9:b1:d6:
34:f0:4b:ec:04:e9:86:13:84:fc:12:0f:a5:85:83:
10:20:db:34:1a:98:be:f7:8b:54:b7:b7:62:61:4b:
53:ea:db:5d:84:c4:40:8a:62:78:2b:c7:92:63:57:
04:28:bf:4b:76:94:b2:b6:e1:87:fe:3a:99:de:22:
7c:84:bd:c2:c2:73:46:01:e7:ee:e8:e9:4c:59:0f:
d0:2c:57:78:4f:39:62:de:7b:00:28:48:b0:30:b2:
4c:11:6b:45:96:1d:50:c1:86:08:d2:28:49:e1:16:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:D6:E9:98:98:07:A9:CB:43:4B:03:BC:68:65:9A:66:B7:FA:E9
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:e1:3a:af:81:6b:15:e8:a0:07:26:6a:03:f7:a4:f4:2f:
6f:41:42:e8:39:59:b2:06:2e:94:3b:a2:5a:42:9d:7a:95:22:
45:b5:2c:b4:31:dc:56:ef:9c:fc:93:38:47:63:2c:f3:86:61:
c0:ea:f6:c2:84:5c:f7:bb:3c:8e:15:e4:17:a8:7d:b9:76:cf:
90:b2:2b:1f:ed:6b:74:51:db:67:58:39:39:e3:c9:af:0f:c6:
12:b5:3f:44:51:49:05:8a:bc:59:d9:ba:45:a8:04:11:43:2a:
ac:0a:7b:41:aa:06:b4:aa:92:a3:84:46:53:07:c7:d5:ac:be:
cc:bc:ea:0d:fc:98:08:b5:e8:ee:e2:96:94:05:32:79:36:94:
6f:bf:b0:26:aa:15:4e:66:ef:bb:d7:c8:6c:27:63:ee:2d:e5:
d1:c2:c9:fe:6f:3e:d3:41:a4:37:a9:dd:52:88:68:9a:55:43:
13:e9:1b:23:85:b4:33:1e:32:c3:f7:10:62:96:ff:67:23:2b:
50:85:81:19:9e:b8:54:fe:c9:01:02:02:6b:e4:13:2f:58:e7:
b5:96:9e:ba:0e:05:c2:9e:44:1d:7a:1e:f8:ed:f0:3d:9a:4b:
d9:e7:72:68:7e:07:e2:61:67:78:7f:67:0e:86:bd:68:80:ff:
64:7e:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:32:58 2025 by rpki-client