Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: uBOw4vBng5R6EINaHpUcUsUsbBOeQNfvT2An2AWv3EQ=
Subject key identifier: 7A:E8:AF:32:B5:A7:C1:F3:53:7A:F6:2B:EE:56:38:48:9B:9F:8E:88
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01976BBCC421D8C51361AE7CA907B9835302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:22 +0000
Manifest this update: Sat 14 Jun 2025 00:00:22 +0000
Manifest next update: Sun 15 Jun 2025 00:00:22 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 82PyqgDiQXlqfV/SrJiKG16tq+XI3eFK1vr1Iti6bdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:c4:21:d8:c5:13:61:ae:7c:a9:07:b9:83:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jun 14 00:00:22 2025 GMT
Not After : Jun 15 00:00:22 2025 GMT
Subject: CN=7ae8af32b5a7c1f3537af62bee5638489b9f8e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:64:0e:11:2f:e1:96:42:43:2f:28:dd:e6:
02:c3:8e:78:87:af:82:b3:5e:3d:e2:62:6b:db:05:
23:fc:51:25:98:72:a9:14:6e:10:a6:60:89:63:c3:
c0:51:7a:1a:d3:89:a5:10:ee:11:00:44:1d:56:2a:
55:c1:f3:8d:ca:5b:f2:43:d5:a5:6d:f2:c4:b5:bc:
c9:dc:ee:dc:1a:f9:53:e2:e5:fc:9e:ec:fe:60:82:
6b:5b:0a:8f:f7:d9:63:63:32:a5:a7:7f:fd:6d:88:
34:a2:b4:55:9a:0b:64:01:7b:49:2b:37:ae:07:25:
30:f0:bf:8d:0c:1d:91:32:d3:39:90:77:5d:b6:5e:
29:ba:1b:be:77:00:fa:a1:4d:72:77:16:9e:df:c4:
8f:8b:fc:66:d6:01:53:a1:fa:50:0f:58:fd:5e:76:
14:c2:e7:3a:7c:dd:bb:b7:41:72:69:a1:d2:4b:b8:
97:1a:53:98:45:bc:52:f7:53:e6:e2:94:0f:91:66:
84:74:01:03:2c:41:46:3f:6a:9a:70:b1:2f:8b:05:
0b:e7:13:24:f6:b4:e1:50:ca:25:b1:c6:5c:be:ec:
a4:3f:ec:4f:2e:17:6e:5d:70:64:95:93:28:2d:86:
19:59:18:90:1d:62:7c:10:a8:db:c7:c2:40:c1:b5:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:AF:32:B5:A7:C1:F3:53:7A:F6:2B:EE:56:38:48:9B:9F:8E:88
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:0c:55:58:8d:41:f6:90:da:15:f0:03:57:ed:f2:db:bc:
70:89:3d:06:7d:a3:1e:34:a8:91:05:34:4f:c6:6b:8e:62:4a:
60:5e:fe:74:08:94:e8:6c:3c:3f:88:80:fd:a0:a2:7c:a7:8e:
50:69:a8:07:b7:5e:92:0a:e9:34:24:ad:39:df:34:07:34:39:
8f:1e:a7:52:25:1c:ed:65:ae:d1:bb:11:b9:21:a3:9d:6d:af:
cf:07:95:1f:ef:f3:c3:5b:21:5a:74:51:09:92:43:0c:f4:6c:
82:1c:76:19:67:47:f3:8c:87:6a:99:ff:9e:13:c3:9e:7e:8c:
f7:1c:d6:26:c5:64:db:8a:e5:84:ae:c7:d6:8c:bf:2a:a1:3c:
3a:29:c5:ae:8b:0b:d0:04:4b:20:24:8d:d4:21:43:74:be:9a:
b4:11:8e:a7:35:f4:7d:b0:80:9b:e5:ac:98:16:b5:71:9f:e3:
9f:eb:93:7e:71:a4:aa:59:9b:6c:b1:ce:c5:2a:3a:30:70:2c:
35:29:1f:8b:33:eb:f9:23:88:e7:56:d7:00:f2:97:b0:28:4d:
3d:41:11:49:03:36:bd:aa:75:ec:b7:22:c5:4c:da:ac:36:f8:
37:ff:85:a6:70:8f:28:d5:91:f7:db:60:a6:75:69:61:af:42:
3d:cd:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:49 2025 by rpki-client