Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: 28fD48R361Wn5GN/y7EIF36EU2USbUcR+7nSEMN9TQQ=
Subject key identifier: 94:C6:AF:19:6D:95:26:23:F4:18:F2:0B:80:3A:9E:FA:66:04:9C:94
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 01975611DFA57CC939D2FAB60D6817BA8337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 1515
Signing time: Mon 09 Jun 2025 19:01:41 +0000
Manifest this update: Mon 09 Jun 2025 19:01:41 +0000
Manifest next update: Tue 10 Jun 2025 19:01:41 +0000
Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: XnoebvLp+NMq+cpjE4b6lWR3fKI6dzeHoOADfNEx5xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:df:a5:7c:c9:39:d2:fa:b6:0d:68:17:ba:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Jun 9 19:01:41 2025 GMT
Not After : Jun 10 19:01:41 2025 GMT
Subject: CN=94c6af196d952623f418f20b803a9efa66049c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:31:45:fc:12:eb:a2:26:a4:37:15:1d:86:
ee:21:24:3f:e7:eb:be:f5:71:a6:84:e8:f1:b4:51:
df:49:ac:14:a8:f1:cf:c1:26:99:ca:9f:66:d3:8b:
c6:c6:23:41:17:3d:69:2d:cd:e4:fd:4a:b5:f3:e2:
3b:8f:53:e6:1a:6f:21:3e:98:e1:c0:2c:d5:26:44:
a1:54:e4:d5:48:58:0c:3d:dc:3e:b3:fc:c4:07:c0:
2f:6e:2e:80:a9:7f:98:5e:ec:e2:49:d3:e1:76:ae:
92:88:8c:80:3b:0c:65:a4:07:73:af:05:3f:03:49:
36:27:0e:b7:b6:d5:ac:ef:a8:eb:a6:8f:94:ae:80:
8e:e9:36:40:19:c8:7a:64:81:5d:67:ab:39:f7:8e:
7e:bf:b9:f0:35:20:41:e6:0a:b4:af:5e:64:97:93:
23:8d:72:4d:3b:f3:21:f3:f1:67:39:40:b6:8d:43:
36:e6:b9:1d:7b:09:ad:f8:2b:3c:c6:cc:56:de:64:
f2:a9:71:41:3e:91:c9:aa:b1:7d:20:7d:c3:56:95:
b1:93:f5:3d:89:ef:35:fd:cd:79:6a:e4:07:2a:e4:
60:f3:37:27:b5:e6:a8:a7:65:6f:91:52:68:4f:f6:
b0:e5:27:e1:54:7e:85:31:51:13:ef:69:3d:6c:bd:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:AF:19:6D:95:26:23:F4:18:F2:0B:80:3A:9E:FA:66:04:9C:94
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:cf:fe:4c:62:fc:20:15:32:a9:d2:8c:c5:68:14:0e:35:
8a:52:4a:b8:42:0e:71:2e:0d:98:b1:91:9b:06:46:3a:db:5e:
28:a8:f3:98:14:14:45:74:91:d7:1c:96:3e:61:25:87:4c:43:
e6:ac:49:a4:69:45:ff:74:e6:c6:cf:00:2b:fc:b8:6b:56:1e:
40:ff:91:b2:33:c1:af:f9:d2:43:01:3d:a6:ba:74:b6:79:cb:
68:f4:67:1b:5d:ca:cf:a9:fe:f3:e7:4d:cd:b6:28:51:32:2d:
f7:56:2b:1d:05:b9:76:e8:32:ad:b9:e1:7e:64:1c:22:a0:04:
49:d0:97:20:98:86:7f:fa:ac:75:b7:ac:ea:38:c4:80:6c:ea:
5e:8d:1a:8d:dd:e9:34:32:af:da:7c:f1:33:7a:2a:3a:a3:2e:
5e:c6:eb:3f:96:56:d1:72:5f:b3:f0:e2:55:78:71:62:70:8a:
57:87:46:de:73:93:39:7e:b3:41:82:08:e3:0b:98:78:4e:11:
2e:c8:74:d0:58:9f:e3:7d:a0:a9:f3:5e:da:00:52:ed:50:bd:
fa:1e:3b:39:06:58:f8:f0:85:e2:a3:c2:56:87:05:98:94:98:
9e:f1:ec:74:ce:3b:de:62:1a:3f:e4:26:04:02:ce:02:91:6c:
68:55:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:19:58 2025 by rpki-client