Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: zRDDNOBGC655NRgq04UI75rShdiIj9+GasC+olOtGMo=
Subject key identifier: C1:D8:0E:E1:25:D1:7A:1D:59:04:26:82:F6:B8:3C:8C:17:50:32:E8
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 01974D0DC99BFF94449047A5C340D27D7397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0D7D
Signing time: Sun 08 Jun 2025 01:00:38 +0000
Manifest this update: Sun 08 Jun 2025 01:00:38 +0000
Manifest next update: Mon 09 Jun 2025 01:00:38 +0000
Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: l0pgWBvGs6+VXPxfFcLYFTGAoyIxrHCAFtL0nSyUZGc=)
2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:c9:9b:ff:94:44:90:47:a5:c3:40:d2:7d:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Jun 8 01:00:38 2025 GMT
Not After : Jun 9 01:00:38 2025 GMT
Subject: CN=c1d80ee125d17a1d59042682f6b83c8c175032e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:be:d2:ad:0b:b3:00:34:cb:ac:76:b6:8e:
53:87:81:91:5f:e5:e7:df:1a:f7:92:30:37:df:14:
9e:b3:b0:46:36:ec:f8:c1:2c:91:18:fe:fe:50:df:
1f:35:8c:60:b0:ea:31:fc:43:5d:dc:1c:95:18:07:
ad:c6:02:96:5f:ec:87:7e:12:20:d3:d2:d7:7a:8b:
e7:0a:fb:73:13:63:c6:de:60:31:fe:c0:07:73:e8:
82:57:1c:07:a9:c7:e1:6c:3b:23:ff:c1:89:41:c8:
cc:0b:8f:30:77:07:85:11:f3:87:2e:b9:4a:fd:91:
8c:ee:09:68:03:6c:3e:87:52:df:70:78:0a:2e:cf:
d2:1c:e0:e7:d4:77:d8:45:9f:07:92:4f:ae:8a:d9:
67:f5:fa:3c:df:57:a9:05:6c:ef:51:4d:cc:1f:00:
dc:06:e8:5e:78:15:ea:22:ec:94:82:98:bc:99:e9:
bf:4c:e4:b0:33:f3:0d:55:fc:d6:27:d8:0a:ae:de:
ca:f5:38:33:32:fd:12:97:d6:08:33:73:34:c5:fa:
59:56:0e:19:9a:1a:8f:d9:40:f8:b1:4f:a7:3d:89:
34:cd:10:88:0b:ce:52:a4:8e:f7:2a:7f:4d:ba:82:
ee:c4:2f:1b:68:f7:e0:08:6b:5a:7d:67:3e:2c:f2:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D8:0E:E1:25:D1:7A:1D:59:04:26:82:F6:B8:3C:8C:17:50:32:E8
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:c2:93:c1:61:21:96:5c:37:fd:01:dd:ae:07:c2:df:d8:
8f:bd:78:2e:3e:5e:33:6b:30:43:a1:89:72:2f:8b:97:da:b8:
57:f9:c9:3c:50:fe:74:5b:0b:50:43:c2:2b:c8:0b:1a:b3:62:
45:89:4b:f7:1d:92:23:c8:93:bc:1c:21:19:c2:7d:48:57:20:
2e:e5:c4:ca:8b:45:17:c9:e5:c1:45:6a:65:ed:1a:2b:d5:46:
1a:a3:cd:5d:8b:cd:1a:e4:72:ac:71:31:b3:5c:fc:08:f0:59:
95:c8:8b:e7:da:cb:02:07:e1:7c:b0:43:02:54:f0:83:a9:9e:
64:07:c0:b7:8a:a0:9e:e9:55:90:2e:c8:99:36:cf:0a:90:b6:
92:56:4d:83:75:46:b3:96:80:c3:59:25:99:71:3d:39:ff:60:
71:9b:d3:47:da:09:2d:8f:48:90:5f:37:36:85:08:90:55:00:
b1:ea:11:d4:70:33:85:ad:f9:e7:55:a8:98:f2:fb:20:4b:06:
74:1d:f1:f2:fe:88:4d:b2:05:f6:54:57:e9:57:a1:e8:82:fa:
7d:e5:93:dd:39:c6:80:32:7c:83:91:3e:1e:93:72:95:59:13:
99:b9:72:3a:f8:80:83:54:23:33:d9:63:4e:70:11:08:c9:a5:
31:46:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:19 2025 by rpki-client