Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: 40vA4yAC/XKEdtagqOn8JRg2vB/1keBdA5DpWonhsPw=
Subject key identifier: 27:14:86:24:35:E6:29:7B:16:B3:C6:1C:3B:2F:69:58:FA:9C:B9:1C
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01974AE8CB4DF21D29B416A3C31D15A11FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 0E9B
Signing time: Sat 07 Jun 2025 15:00:59 +0000
Manifest this update: Sat 07 Jun 2025 15:00:59 +0000
Manifest next update: Sun 08 Jun 2025 15:00:59 +0000
Files and hashes: 1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: Z+VEkVjmLkJkzJyrndFffUcGB4wqEOn2sB5MEX5DXKQ=)
6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:cb:4d:f2:1d:29:b4:16:a3:c3:1d:15:a1:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jun 7 15:00:59 2025 GMT
Not After : Jun 8 15:00:59 2025 GMT
Subject: CN=2714862435e6297b16b3c61c3b2f6958fa9cb91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:fe:0b:7c:7d:95:f3:e5:27:e5:ae:32:68:
24:87:66:28:08:bb:3d:8f:c0:01:7a:65:04:6a:d5:
3b:ec:b6:85:db:78:26:4b:14:00:10:4c:58:01:6d:
bd:27:c4:76:53:24:74:b0:15:43:82:fe:93:2c:08:
56:d9:12:1b:c3:c1:d2:a5:d6:d5:41:7c:0f:85:95:
3a:ec:f7:50:66:bd:10:83:54:c4:eb:51:12:75:cd:
2b:96:b8:15:4e:47:f0:ae:ae:97:33:c3:e3:f9:d0:
53:49:fc:30:c8:eb:1d:32:59:1a:f6:03:a3:02:f8:
79:37:0d:f8:57:93:7e:ec:f4:6f:c3:67:de:35:00:
3c:aa:61:bd:33:6b:51:51:02:3c:69:ba:dd:0b:b3:
79:29:9c:10:35:de:24:b1:e0:46:ba:c0:93:c8:65:
7c:51:47:84:34:51:5e:9a:0c:4c:3c:45:5e:45:05:
cd:28:54:2c:0e:c1:d7:9c:03:eb:f1:0b:af:b8:be:
fe:b0:75:97:3b:23:ca:84:db:e4:e0:18:ba:61:42:
21:e3:62:1f:f1:ac:9b:cc:18:d1:10:f2:e0:af:68:
65:46:b3:c2:41:57:f6:82:ac:b7:88:e8:a1:32:51:
e4:4b:cd:b8:d2:39:f7:27:ec:c1:58:4d:a5:e6:5c:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:86:24:35:E6:29:7B:16:B3:C6:1C:3B:2F:69:58:FA:9C:B9:1C
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:22:c0:c9:78:c2:eb:75:78:a6:29:da:9e:ac:bc:82:6a:16:
e9:dd:30:50:06:b3:8d:dc:15:c6:e4:9d:c0:12:70:81:16:0f:
5b:c0:bc:9c:b9:79:fd:d5:b5:1c:9e:9b:48:b5:2a:9e:1e:3a:
f5:eb:6e:44:7f:d4:e7:76:a8:7b:ee:78:1e:47:d8:61:1d:d8:
13:ce:cf:53:a9:49:90:6b:6b:6d:33:23:8e:79:22:f8:ba:0e:
7a:d7:67:fa:da:ab:f0:65:25:56:c1:89:70:db:5d:89:0f:29:
34:df:01:39:62:0e:53:4f:a9:0f:fb:02:70:ac:be:99:bb:cc:
2c:57:28:3c:c2:70:2e:b5:9d:8c:b3:74:05:27:7f:ea:a1:af:
a0:7d:42:e1:90:fe:8f:6b:af:60:31:a6:b9:dd:0c:98:81:31:
3c:9d:3a:5b:23:9d:51:52:30:99:86:3c:de:f7:b1:b8:74:68:
99:8c:26:76:5f:45:a0:cf:ca:0a:62:97:ef:6b:e7:68:50:ae:
0d:b1:95:d6:67:fc:8b:4b:10:be:d1:fb:b5:05:89:13:99:d8:
aa:c8:b5:03:20:31:c8:ae:d1:0d:61:2c:29:09:25:2c:da:30:
08:f8:98:40:30:8a:d9:1d:67:00:ae:60:7c:fc:d5:f9:36:a6:
d9:80:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:24 2025 by rpki-client