Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: AUOVmGynQGRR1IqFYUce/zRp+nMwQJeYGdsVPsIVp4w=
Subject key identifier: F4:1F:21:A5:7F:2F:43:B5:2F:94:1B:82:1C:82:2B:9D:C6:A2:21:55
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 0197610299E7D418DEEB69EF88E7706AE02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0D26
Signing time: Wed 11 Jun 2025 22:00:49 +0000
Manifest this update: Wed 11 Jun 2025 22:00:49 +0000
Manifest next update: Thu 12 Jun 2025 22:00:49 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: adlE/S5LZmlukaj9yEH5ofJJBs4Kyg2f6/8Pg+MqB08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:99:e7:d4:18:de:eb:69:ef:88:e7:70:6a:e0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 11 22:00:49 2025 GMT
Not After : Jun 12 22:00:49 2025 GMT
Subject: CN=f41f21a57f2f43b52f941b821c822b9dc6a22155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:9a:a2:39:64:35:20:9d:e7:39:71:22:08:
21:d2:88:9f:b2:85:11:19:79:92:a7:fc:9c:07:bf:
6d:96:91:01:eb:2c:38:b4:6d:59:47:15:df:d1:e2:
b6:56:82:22:e3:27:ec:29:59:df:57:75:49:37:f6:
83:c0:53:a3:32:98:2a:92:0e:f4:71:d9:46:eb:96:
eb:40:2c:e2:4f:f0:b9:9c:da:d4:d7:6c:e1:d0:42:
c2:55:bd:b1:25:62:d3:a9:57:5d:b7:01:f3:a2:64:
22:b5:c7:11:0a:bf:18:4a:ee:0b:7d:12:ac:38:d6:
4e:18:6b:22:81:96:64:11:f0:57:0d:e3:87:e4:f0:
58:eb:ea:bf:f4:35:05:b2:e9:d6:c2:b9:cb:9c:c7:
6d:42:a2:18:9a:3e:62:6a:2a:d2:bb:c2:79:b6:aa:
cc:93:b5:86:1e:22:8c:c5:95:50:8c:0b:57:27:0b:
f1:c8:eb:bc:5b:b7:26:99:70:6d:1d:1f:59:4b:a0:
03:b8:c0:04:ad:ea:59:c9:d2:64:69:1f:2b:3e:4f:
aa:94:83:f5:f0:d2:4d:4c:17:16:0b:11:7f:aa:3b:
03:30:13:e5:99:e9:bb:d5:fe:61:11:fa:ae:93:32:
54:26:a6:07:01:25:c1:b8:8e:82:64:d1:09:84:03:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:21:A5:7F:2F:43:B5:2F:94:1B:82:1C:82:2B:9D:C6:A2:21:55
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b4:43:5b:f7:f4:95:d8:36:76:70:29:dd:da:67:76:14:5a:
9f:c7:f5:46:95:03:e0:00:5f:3e:e0:35:48:7d:1f:e2:11:f4:
61:0f:60:19:92:1b:fe:e1:13:84:62:a3:fc:d0:0b:cf:ca:bb:
4c:df:de:da:73:89:28:f3:75:26:5c:38:75:c4:89:9a:8b:39:
3b:82:c2:6f:0a:87:b8:ac:26:82:a6:1d:17:28:9e:43:fc:54:
38:de:16:be:64:05:ec:69:75:a6:34:f1:f0:85:f2:b1:10:ed:
5d:27:4c:b8:cb:9e:9c:37:7b:41:45:60:47:cc:bf:19:ce:c3:
c8:40:1f:ef:27:dd:59:fa:1a:1e:ed:9d:fb:06:13:42:69:4b:
12:bd:91:c7:94:b2:6c:96:44:6c:25:bc:08:c5:2e:b1:62:2b:
f4:53:23:73:0d:f6:a7:e8:e5:0c:12:08:f5:c4:fc:0e:74:3a:
95:35:3d:0a:7d:be:8c:27:f5:b1:1a:09:e8:f3:33:bb:fa:b6:
42:39:8a:1d:81:c7:84:9a:32:be:9b:70:06:a2:70:70:fb:b9:
38:de:13:ce:3b:c8:4b:7a:a7:f1:ef:0a:57:f9:91:cf:f5:f1:
55:6f:71:c6:32:b1:a3:e7:28:95:72:1e:c9:25:3e:8a:84:7c:
91:bb:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:43:27 2025 by rpki-client