Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: ctvf5x1OkYLZuosnrD5RDXbCnLzjsKUIlXmZdjzTk8k=
Subject key identifier: B7:81:00:9C:E5:08:4A:20:65:49:79:25:73:62:82:4B:CE:33:39:0B
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 01974FD7A86BD58CE51E704914BB3DD98D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1021
Signing time: Sun 08 Jun 2025 14:00:22 +0000
Manifest this update: Sun 08 Jun 2025 14:00:22 +0000
Manifest next update: Mon 09 Jun 2025 14:00:22 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: OORuV/L9YNDhSI6PPHTJvDIV7VxRK6xxiHsEIuaDPUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:a8:6b:d5:8c:e5:1e:70:49:14:bb:3d:d9:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jun 8 14:00:22 2025 GMT
Not After : Jun 9 14:00:22 2025 GMT
Subject: CN=b781009ce5084a20654979257362824bce33390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:cc:25:bb:04:8a:74:12:c0:1d:fa:fb:cb:
99:4a:e8:29:92:15:6d:13:ad:d0:e6:a4:80:fb:4f:
03:13:49:c2:db:9b:8f:2a:ad:95:24:50:46:57:fb:
a3:8f:89:a1:ce:28:77:09:25:04:86:40:1a:af:2a:
35:e8:9f:21:67:be:ce:82:40:57:3d:df:b7:f2:dc:
b0:66:4c:ae:c0:06:e6:6f:29:9b:30:a8:8a:15:1f:
7f:61:b1:24:a3:5f:ff:2b:44:80:3c:da:1c:8a:c7:
30:b3:7e:41:13:e8:fc:0d:f9:77:a6:13:6a:b7:73:
6d:b1:5d:43:39:63:c2:45:1d:1b:86:3e:3e:c7:a8:
cd:55:b1:a2:04:e5:64:5c:c6:99:c7:4e:7e:5c:d1:
98:fd:f3:01:04:d2:bf:36:62:df:70:9c:56:90:20:
a6:e1:7e:4f:fe:76:10:a1:e1:46:b7:7a:0b:81:72:
d3:65:fc:b0:f5:5b:93:b5:95:1f:20:67:d7:32:d8:
2a:11:06:32:72:b7:02:ad:f7:bd:e1:7b:da:f3:0c:
f2:ac:6a:fd:23:bc:8b:34:85:14:06:c1:46:ce:24:
87:27:6d:b4:e8:f7:a4:5d:68:4c:55:fb:8b:91:49:
0d:3c:3c:e1:c4:e1:be:6a:5c:ee:b3:5a:d4:71:8c:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:00:9C:E5:08:4A:20:65:49:79:25:73:62:82:4B:CE:33:39:0B
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:af:62:d9:51:c0:b0:d7:88:10:1e:8d:67:c8:90:60:ea:
0e:9d:19:c4:5f:6f:f0:a4:d3:48:84:24:4e:f9:5a:28:05:28:
a8:55:1c:ed:5f:eb:cf:5b:70:09:eb:4d:b7:aa:8e:b7:fa:08:
2f:f5:ef:2b:08:cd:20:46:6b:55:58:c9:3b:69:2d:f1:de:0c:
d6:70:aa:31:82:53:ad:20:af:86:bf:10:09:cd:db:5c:a5:95:
78:5b:de:91:f5:9e:e1:98:f6:7d:95:8b:98:39:e9:30:59:ea:
e6:1d:99:d3:0a:2d:1f:bf:af:14:d1:ba:9f:d2:d6:f9:7f:d0:
a8:03:11:f2:6d:37:f4:33:f3:e0:e1:69:9e:6e:6c:56:dc:ae:
cc:c2:be:63:cb:da:22:b1:1a:cd:60:f5:2f:3c:79:c4:a2:1d:
2d:29:1e:17:e5:d6:fb:e3:c7:0d:81:18:83:7b:0a:44:4f:33:
15:6e:d1:81:cc:41:f0:1d:cd:74:87:d5:4e:c6:fd:04:eb:84:
de:ff:4f:c4:9e:57:3f:d8:22:77:76:a2:61:7b:87:b3:dc:5f:
64:29:6e:06:5c:7a:06:b2:18:bf:24:58:d9:55:68:f3:6f:da:
c1:62:07:73:d7:7a:1d:05:b1:f0:81:05:0c:1d:0c:b0:2b:75:
6b:4c:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:34:13 2025 by rpki-client