Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: +2204WAc7tozNihNrHHocbjvXKACzSRkrBRPMIIQ88w=
Subject key identifier: 75:01:16:52:5F:FD:DB:8D:AA:08:1E:92:80:53:4E:BB:BC:DF:D1:F1
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 01975490220F27F1E337E525392D843A19CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0AC9
Signing time: Mon 09 Jun 2025 12:00:21 +0000
Manifest this update: Mon 09 Jun 2025 12:00:21 +0000
Manifest next update: Tue 10 Jun 2025 12:00:21 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: gKe7PXhiUHEnvJI9pxBbqEEa8w+mk0dZX2zGtSGWZa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:22:0f:27:f1:e3:37:e5:25:39:2d:84:3a:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Jun 9 12:00:21 2025 GMT
Not After : Jun 10 12:00:21 2025 GMT
Subject: CN=750116525ffddb8daa081e9280534ebbbcdfd1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:08:f0:41:7a:5f:b2:9b:37:fc:e8:f3:d8:
9b:97:96:d1:32:de:4f:68:fa:e2:ad:fe:b2:ea:f2:
2e:af:12:0c:d6:2f:8f:60:2f:dd:db:2a:e4:d3:ca:
7d:01:76:bb:13:c5:5f:c6:b7:87:bf:10:42:42:ab:
24:fc:3d:83:59:01:60:cd:4d:e4:02:68:e1:0d:ed:
2d:c0:66:85:5f:ef:90:d9:b8:af:c6:5b:b5:1e:0e:
cf:0b:55:99:11:18:c2:f2:5b:24:a0:d2:d6:a3:8a:
e1:28:24:16:f3:8b:f0:da:df:c2:c7:f1:f4:d4:a0:
ec:76:13:4a:0c:b4:02:1e:79:31:c0:96:10:70:23:
66:4a:29:d6:cf:57:87:fe:17:c8:ea:7a:94:9f:08:
73:b5:ba:54:40:a8:ea:b5:a8:63:b9:c1:ce:69:af:
0a:a1:c7:59:44:73:47:b2:ea:42:81:48:18:b0:f2:
dd:1b:6b:47:3b:e1:a2:54:ee:2b:94:96:db:9d:42:
48:60:dc:f2:1f:d2:e9:95:3a:3c:a8:d6:33:d9:be:
80:f7:aa:ce:82:22:23:39:8c:bd:5c:94:3a:9a:49:
91:0f:b7:de:8e:62:02:bd:9c:e4:2d:06:bd:97:e4:
45:b5:bb:1a:5c:fd:15:11:fe:2d:a1:2f:bd:b1:0f:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:16:52:5F:FD:DB:8D:AA:08:1E:92:80:53:4E:BB:BC:DF:D1:F1
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:dd:99:ea:8a:29:f0:d2:9d:52:c6:c4:db:1c:a7:44:b8:
10:f2:37:0d:fd:28:0d:fe:9b:77:8b:ff:60:84:47:94:12:c5:
88:c9:5a:67:3a:e3:0d:b4:26:3e:bb:12:62:37:16:ff:5f:70:
13:a6:12:52:5a:97:9b:fa:c0:26:f9:29:01:02:90:81:d8:31:
36:ad:3f:7d:d4:9f:59:7e:65:7a:55:90:a4:71:fc:e1:07:31:
2c:4a:9d:d9:1b:20:d4:3a:ea:45:50:7a:b7:d9:a3:90:99:7a:
6c:ba:29:63:5b:c9:fa:87:4e:44:64:77:5b:66:93:ec:ce:85:
6a:00:f8:ae:e2:08:63:33:94:35:7c:d6:5e:57:de:90:99:e8:
a3:41:f9:67:76:1d:74:d9:3d:67:7a:02:d0:06:d4:9e:ff:b4:
32:f8:a1:86:7e:7c:ac:30:90:fd:ab:af:f3:6c:2a:7f:13:14:
4f:c8:30:1a:5d:1b:33:44:e1:e2:88:c4:91:08:67:80:0f:84:
0b:e6:da:c5:56:8e:0d:10:1a:3d:5d:b8:28:23:1c:e1:7f:da:
24:1b:b5:b1:e0:34:23:34:97:47:55:09:b5:0d:20:b6:b5:91:
d4:2b:0e:86:df:3c:6c:c8:52:29:ee:a3:12:df:65:74:d9:52:
8f:08:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:52:08 2025 by rpki-client