Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: kFRK90JzmlzICW7fN6QiD3YuREDNvuC1B/sQ4EzJI+I=
Subject key identifier: 90:A5:4C:6D:7B:C1:08:E5:67:63:12:04:A4:5E:8C:9F:65:85:20:A9
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 019748FA5396594907896188C578C086AFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:54 +0000
Manifest this update: Sat 07 Jun 2025 06:00:54 +0000
Manifest next update: Sun 08 Jun 2025 06:00:54 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: yLWh4DqcbJD/ts4fN4C7CQVfcKZUZ/N2PRdHVhhESBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:53:96:59:49:07:89:61:88:c5:78:c0:86:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Jun 7 06:00:54 2025 GMT
Not After : Jun 8 06:00:54 2025 GMT
Subject: CN=90a54c6d7bc108e567631204a45e8c9f658520a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:8b:84:d2:e7:28:e1:20:9f:03:53:1c:30:
f8:2b:60:01:1e:6b:9c:a0:9b:ac:20:22:7d:b8:a2:
4b:21:98:8a:8b:dd:b2:9e:bf:84:51:96:76:98:cc:
64:1c:86:d9:8b:34:1c:35:cb:03:88:24:79:15:b1:
11:bb:01:97:fb:08:c4:0e:c2:c7:d7:c6:39:a4:60:
9b:1f:99:a4:a6:39:7b:66:03:9f:34:a8:59:26:2d:
94:7c:6a:80:f0:4c:ed:c3:d5:c5:a6:97:0e:27:3e:
76:82:2a:98:46:42:7a:14:3d:a2:f2:2b:f5:21:4e:
78:56:9d:b8:8b:3b:3a:20:03:70:cc:b6:33:6d:11:
47:0e:ef:7f:61:84:62:b1:3a:9e:c6:13:66:18:9b:
73:6b:fa:d0:70:e6:66:5d:bc:3f:6b:ad:bc:5c:43:
b8:39:bb:9a:19:df:d1:f5:ec:2e:fd:b6:21:54:bd:
af:82:f4:ee:18:78:f3:71:f4:a4:b6:61:38:46:f6:
99:d8:47:00:32:ba:a4:0c:ef:85:6a:a4:f4:8e:ce:
ee:1b:87:29:18:d6:a9:de:a0:21:e1:70:4f:8f:1f:
c5:9a:5c:6b:92:6a:26:5a:9d:36:86:39:64:ff:1d:
80:71:b4:5f:96:93:8a:0b:88:25:db:fe:7b:71:c9:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:4C:6D:7B:C1:08:E5:67:63:12:04:A4:5E:8C:9F:65:85:20:A9
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:b1:28:18:39:ee:b5:d1:86:c4:1b:73:fc:4c:23:be:fa:
5f:fd:f4:21:b5:fa:55:59:0b:c8:47:fa:be:5a:71:df:0b:7e:
eb:7c:3b:94:7e:74:10:d8:76:c9:67:95:59:1e:62:cd:c6:0b:
98:f1:71:95:74:66:9c:8f:19:aa:bc:c1:c5:6f:bd:7f:81:f6:
72:8a:83:75:be:e6:7f:f6:37:7d:3f:ce:a4:80:4e:ba:80:fb:
7b:5c:25:a2:a0:cd:f2:9d:fc:62:d1:80:2a:20:ed:a7:62:d8:
af:94:b7:20:62:cd:74:b2:ce:53:7b:4a:97:91:b3:6c:c6:32:
d7:db:08:b6:cf:9c:cd:90:6e:88:34:45:e1:12:ee:f0:8d:25:
b3:82:8a:74:b4:32:8a:51:d4:3a:5c:e8:c5:cd:07:34:c8:93:
8c:ab:9e:e0:20:0a:e7:2a:fc:1a:33:8c:15:7f:1f:dc:ad:00:
f3:ab:89:e1:9f:99:b6:82:ca:e2:97:01:11:04:5f:e2:c5:11:
38:f5:b6:9e:eb:aa:1c:54:27:ed:03:56:f9:b9:e0:b1:81:e0:
48:98:65:98:1a:11:33:97:00:b4:eb:bd:72:2b:72:92:1c:cd:
29:b0:e7:99:17:45:6b:29:a7:59:47:6e:a4:e7:74:91:f5:23:
c8:93:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:46 2025 by rpki-client