Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: gpFckJSAR00dnWyVTbcntdYjlmk/kQo+4dxhPwxDsNU=
Subject key identifier: A2:23:FE:06:F8:7F:74:44:1B:BA:E3:76:B7:39:E9:08:64:8E:FC:A4
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 01974EC55C778A9B5319F341ACE90AB705F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0C28
Signing time: Sun 08 Jun 2025 09:00:46 +0000
Manifest this update: Sun 08 Jun 2025 09:00:46 +0000
Manifest next update: Mon 09 Jun 2025 09:00:46 +0000
Files and hashes: 1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: ghhMz48gFtp9YylOPmDRHbfqDwSSAjQzTsXr06T9UV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:5c:77:8a:9b:53:19:f3:41:ac:e9:0a:b7:05:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jun 8 09:00:46 2025 GMT
Not After : Jun 9 09:00:46 2025 GMT
Subject: CN=a223fe06f87f74441bbae376b739e908648efca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:60:20:5c:ff:71:c5:1e:17:09:6d:70:26:6f:
e6:26:6d:6d:f0:bd:7e:2f:90:fa:b9:6e:de:b6:b5:
12:e5:ac:b8:fd:41:3c:79:2c:63:07:81:d7:73:b5:
c8:c1:46:fb:12:bc:e9:97:99:b9:02:be:e5:e3:03:
09:77:7a:00:1d:84:6e:ab:85:2a:c6:e2:1b:95:2b:
99:7f:08:a0:29:09:56:cb:44:73:3c:74:f8:36:19:
58:8f:51:26:0c:70:aa:af:39:5a:ad:86:10:85:05:
09:9c:f8:7d:48:12:57:f1:a0:ea:f5:ed:72:b9:92:
3a:da:96:70:66:d8:17:65:2a:9e:1f:51:7f:f6:c9:
c8:fc:db:e3:fd:16:ea:90:95:0a:8f:f1:3c:03:ba:
52:99:11:ea:7c:52:82:85:bb:f0:b1:cb:6f:e2:3f:
79:e8:38:f6:19:68:3f:c1:01:17:be:5a:0f:6c:7d:
a8:8d:42:fa:2c:32:22:ab:fd:ad:ea:2f:fc:7e:3c:
ec:5d:c4:1e:69:bd:5c:a2:ea:ac:95:7d:63:6e:6b:
8c:7f:4d:33:a7:3d:39:62:07:5a:8d:12:67:aa:45:
af:a2:c9:70:b0:14:53:9c:6c:fe:db:a6:33:7e:ba:
65:8f:ef:03:ca:ba:fe:6d:d1:6d:ef:73:ef:7c:15:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:FE:06:F8:7F:74:44:1B:BA:E3:76:B7:39:E9:08:64:8E:FC:A4
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f4:66:38:20:f8:e4:bf:3e:55:e4:2b:78:e4:32:78:a9:62:
1c:c3:77:ef:f5:2c:3e:8b:37:38:61:62:16:9c:d1:40:42:4a:
7c:66:57:61:a0:20:ef:63:c9:aa:58:b1:b2:92:5e:3d:4c:eb:
f6:e9:ff:bc:5f:4a:c8:42:f9:74:87:9a:04:a8:b6:97:26:86:
ec:4e:0f:c6:4f:6c:94:e3:f0:fe:eb:3a:e5:8a:fa:6a:50:ae:
ab:44:2a:95:0e:5a:02:0c:cb:fd:16:34:7e:11:33:49:ba:4f:
64:5b:4c:c9:86:75:2f:bf:67:9c:a1:39:72:25:af:52:50:08:
47:cf:6d:37:74:b7:ba:87:b6:64:39:87:4a:99:e4:f7:f7:50:
25:53:b1:0c:2b:a7:cd:c8:9d:05:53:6d:76:f7:8d:01:85:bf:
e0:f1:8e:13:67:aa:c9:b8:77:95:ea:00:4e:87:6f:96:80:4d:
ce:f9:27:b6:c7:27:82:c4:0c:95:cd:e3:44:21:cf:69:29:de:
c3:05:8d:0a:46:a3:92:6e:eb:8d:28:6c:db:16:eb:89:e0:3b:
f1:79:5f:36:25:ef:e1:7a:30:8e:b0:1c:99:19:c5:b5:95:6f:
a7:de:42:f2:4a:c3:49:45:a2:bc:4f:ca:6d:d1:cc:b0:a2:d0:
63:42:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:00 2025 by rpki-client