Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: M43hEhdktgxWBOb7p5FWIvaIYYNFMgkCK+aRjLT80so=
Subject key identifier: 71:98:B7:A8:E4:F9:A1:A2:4E:2D:6F:11:B5:C2:63:07:FC:37:3B:FD
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01975B37AB16DEB46F4368CE3BEA6F12948D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0D23
Signing time: Tue 10 Jun 2025 19:01:04 +0000
Manifest this update: Tue 10 Jun 2025 19:01:04 +0000
Manifest next update: Wed 11 Jun 2025 19:01:04 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: xtnrQX6Gl8DuC0U7oWZU8wHaKwQ1ISO0ivMXzsj546Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:ab:16:de:b4:6f:43:68:ce:3b:ea:6f:12:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 10 19:01:04 2025 GMT
Not After : Jun 11 19:01:04 2025 GMT
Subject: CN=7198b7a8e4f9a1a24e2d6f11b5c26307fc373bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:91:09:d1:81:70:6b:69:aa:d4:00:62:7f:
01:a8:31:7b:98:08:1e:72:ba:d4:5f:da:9e:fb:89:
ba:56:02:d6:e7:ce:e3:6e:1f:0b:d8:e9:2a:e8:a7:
0d:46:03:e5:cd:46:d0:18:7e:0d:3a:98:85:b6:eb:
56:c6:68:81:b0:76:b3:d5:10:7b:36:e2:9e:e9:48:
5e:e5:47:bb:a2:6f:96:9d:f4:8b:52:9a:0d:2b:1b:
25:8e:d9:d8:02:a5:96:f1:ea:34:d5:d8:96:55:db:
f1:1d:9b:cf:42:e7:30:61:9b:ea:26:75:f7:0a:81:
1c:f1:7d:d7:9c:d4:68:b9:0c:f3:22:95:48:cf:57:
d3:d9:90:ad:a6:47:c7:6a:21:e7:92:84:75:f4:05:
25:b9:a8:dc:c4:61:67:68:76:f7:23:90:e5:bd:42:
ae:d2:61:7d:fd:80:e2:e6:ae:30:5c:ce:42:26:3e:
29:5b:41:83:f2:e3:66:e9:d6:9d:73:6d:4f:47:a0:
65:53:c7:e3:7f:ae:dd:a5:2b:ab:46:5b:53:5c:1a:
32:d5:04:54:26:f9:90:f6:2b:ed:e9:49:f3:b8:70:
b2:6a:d4:7e:8b:5e:0d:90:1a:97:44:a4:81:cd:ce:
3d:61:46:0d:71:db:f4:5e:f4:a4:c3:d3:81:7b:57:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:B7:A8:E4:F9:A1:A2:4E:2D:6F:11:B5:C2:63:07:FC:37:3B:FD
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:52:c0:6c:fa:39:39:26:9f:aa:8b:88:b5:7b:a0:be:9d:
83:98:28:9e:6b:c3:0d:9b:53:03:02:24:25:ed:27:ab:27:16:
15:d5:de:4d:c6:09:ef:5d:db:f1:13:fb:05:01:d2:c6:74:d7:
23:6d:38:ba:11:d1:7e:07:58:0c:da:47:2d:30:38:b6:aa:14:
ef:fc:27:5d:c8:b8:e4:90:e4:a7:02:e1:45:19:ff:5d:c5:b1:
c7:5a:1e:4a:fa:62:6d:e4:5c:44:bf:66:1a:86:fb:56:b2:fc:
89:cc:5b:d4:22:3d:53:d7:bc:e5:f4:8c:4f:14:66:c1:b4:7f:
d9:e8:6c:f3:3b:c1:6d:ba:d0:f3:56:23:40:cb:ad:15:50:40:
b5:50:a1:93:71:cc:e4:cd:06:4e:6f:30:d4:20:ce:db:86:f6:
27:e7:c3:a4:79:97:33:e5:2f:a9:b3:55:88:29:15:04:96:72:
9b:f2:ea:c6:fb:76:9e:ac:8c:e5:95:59:63:a5:77:4c:aa:6a:
c4:1d:21:21:80:34:07:e8:12:69:68:cf:eb:a8:ae:2e:fe:9d:
99:0d:06:76:32:5d:a5:74:ad:c9:da:e6:ff:45:db:a6:a5:45:
b1:1a:bc:01:fb:8b:d1:20:7e:08:af:1d:67:ab:52:b4:81:08:
27:90:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:23 2025 by rpki-client