Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: TMoE18i+2Y0rIE8ycAf/oMQ9iA+A6bIBlcUh6lSYGHw=
Subject key identifier: CA:57:16:09:CC:7A:F5:53:1B:2A:D4:21:E2:CF:77:09:96:96:68:F6
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019750EAA250A66EDA3002AD4A41132A59B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 1346
Signing time: Sun 08 Jun 2025 19:00:43 +0000
Manifest this update: Sun 08 Jun 2025 19:00:43 +0000
Manifest next update: Mon 09 Jun 2025 19:00:43 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: Teb+O/fYDpZW2IxvrongJm2wrwFHbjC2qLSUkteym9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:a2:50:a6:6e:da:30:02:ad:4a:41:13:2a:59:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Jun 8 19:00:43 2025 GMT
Not After : Jun 9 19:00:43 2025 GMT
Subject: CN=ca571609cc7af5531b2ad421e2cf7709969668f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:39:db:b1:ce:71:b0:81:50:e7:5c:90:e8:
20:ca:ef:70:38:76:0c:6b:84:b9:d9:ab:87:49:8c:
bb:93:04:dc:98:9c:15:34:e4:c1:a6:7b:db:55:61:
c1:cc:5f:8e:13:93:a2:71:c9:c4:6a:44:41:44:b5:
73:7a:7b:6d:3e:1a:22:9a:6d:0d:3a:06:3a:15:e4:
70:ca:61:90:9d:e2:67:49:87:bc:df:c4:df:3f:75:
7e:29:71:b2:02:f3:08:5d:30:01:5a:84:d0:dc:dd:
5a:a1:fc:a4:d4:bb:66:cd:b0:15:c3:be:81:86:5e:
14:95:41:4f:2b:fd:bb:8e:4c:bc:4e:96:cb:cb:bc:
da:84:d8:f2:97:94:0d:d7:0f:8b:c3:15:85:ce:0f:
23:1c:42:8f:49:34:23:d6:96:1a:e6:25:6a:c6:2c:
87:32:13:69:83:31:13:44:1d:f1:c9:66:a8:2d:f0:
01:2b:50:71:de:94:14:77:a8:a2:13:eb:e3:f7:de:
9a:cf:b1:4f:a5:d1:49:9d:a5:68:d2:66:b0:22:d7:
88:d5:40:0a:73:3e:f9:70:15:2d:48:f8:4f:19:6f:
42:0c:ae:2f:36:2a:5d:9f:7a:45:de:0a:4e:62:50:
f3:ba:38:a9:32:ee:53:18:37:9f:85:8d:7e:c1:a0:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:57:16:09:CC:7A:F5:53:1B:2A:D4:21:E2:CF:77:09:96:96:68:F6
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:9e:b5:96:49:c6:87:21:3b:5a:57:da:18:7b:a9:5d:c1:
3e:f3:97:d1:7f:e4:4c:c2:c9:c0:f8:f4:25:6b:ac:d6:5d:bb:
b3:3b:ae:d0:f6:e7:8b:51:d8:96:5f:f4:95:d9:70:d9:c9:8d:
82:71:f4:cb:c0:79:07:a6:6c:85:eb:1b:d6:d6:39:b2:54:26:
a9:a8:93:b9:b5:0d:e3:31:a9:51:64:cb:bb:4c:5a:73:93:0a:
d6:76:52:55:72:f0:25:16:5d:6e:68:b5:0b:e1:6b:a2:5f:f0:
37:ad:6c:68:db:1d:99:ab:38:6e:f6:ac:ee:f0:8e:9b:b8:0a:
16:43:b7:7c:1a:8f:63:ca:b0:ba:e7:f3:43:7c:16:9f:ac:c5:
3b:22:48:68:ee:89:29:86:05:15:af:74:dc:d9:c9:6e:93:fa:
21:af:a6:53:2f:8f:c6:f8:67:03:b8:f8:27:ff:98:52:4d:57:
c0:a1:9c:17:33:fb:81:09:bb:9f:46:6a:2c:bb:21:55:02:8c:
a3:66:e1:57:48:89:d0:a9:78:72:e5:6b:a5:39:90:06:f7:84:
62:61:3e:6e:cb:bc:49:e5:dc:c5:49:79:e3:fc:c6:a5:6c:29:
73:de:14:76:70:e6:6f:94:8f:dd:f1:47:d4:28:92:14:46:59:
54:58:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:45:33 2025 by rpki-client