Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: SNictBuo0VYajHXdznumrZz0eF6nV8v51Hrt24d7E50=
Subject key identifier: 3F:CF:E7:41:E4:F8:BA:99:F8:03:77:40:33:29:ED:25:7A:F3:E1:48
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 01975158D86862208E14C2974C1B8EC7A793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 11F6
Signing time: Sun 08 Jun 2025 21:01:06 +0000
Manifest this update: Sun 08 Jun 2025 21:01:06 +0000
Manifest next update: Mon 09 Jun 2025 21:01:06 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: WDeEXnJqnfoY6ilD0FzfhWQGwLjWxdISIe3cZOSzQC4=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:d8:68:62:20:8e:14:c2:97:4c:1b:8e:c7:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jun 8 21:01:06 2025 GMT
Not After : Jun 9 21:01:06 2025 GMT
Subject: CN=3fcfe741e4f8ba99f80377403329ed257af3e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:bc:c6:5d:d9:a2:26:41:dc:89:4c:d1:a8:
7c:04:37:f5:36:dd:24:06:5c:67:a0:ad:8e:9d:ff:
64:48:ed:8e:85:7d:dc:3b:bf:f8:bf:26:b9:27:ee:
fd:33:41:1a:56:69:13:a5:5e:5c:ff:a5:c2:c3:82:
da:9a:43:a2:3d:20:bb:c0:95:80:b7:a7:70:96:18:
6b:ce:50:ad:3a:9f:99:a9:52:6e:5a:3d:e9:8f:9d:
c0:dd:0c:3d:12:92:f7:7b:d1:41:4e:cc:78:1b:a8:
32:e7:33:09:ef:0e:f6:94:bc:06:66:69:78:e5:a1:
4b:c0:f3:c7:a3:52:79:4f:19:45:bc:8e:8b:20:e9:
35:87:d7:83:7d:d4:6c:64:9f:7e:da:c6:65:f2:a0:
02:0b:e5:9a:3c:c0:78:0b:f7:a1:6c:6d:8b:c6:6a:
8a:a3:bf:fe:a1:51:68:00:a0:80:50:99:0d:28:a7:
4c:b3:a8:ed:02:69:0a:07:1b:e4:a9:a7:17:4f:34:
bb:e6:fa:49:be:5a:27:b4:e6:63:2b:c8:bc:ff:4f:
34:fc:56:b4:32:92:a2:45:c6:04:5a:38:48:71:72:
7c:12:a2:34:6c:51:54:3c:a3:75:e1:98:08:23:f5:
15:fd:ca:05:03:f5:43:90:8d:70:96:41:d2:55:54:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:E7:41:E4:F8:BA:99:F8:03:77:40:33:29:ED:25:7A:F3:E1:48
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9c:00:3e:fc:61:30:cd:41:55:a8:1b:6e:cb:e2:4b:18:be:
06:f9:e6:e7:ec:33:c7:34:de:63:3f:35:5f:3d:d2:a6:a0:ff:
fe:bc:37:ab:00:0c:b9:0c:5e:14:50:dd:d6:35:53:e2:1c:75:
15:80:c1:1c:a0:e4:b3:41:8c:81:f4:75:38:ed:3f:25:36:00:
02:46:f6:79:59:00:cf:18:c1:e5:22:02:de:b9:8f:de:92:4f:
ef:ef:a0:8d:07:10:d1:c0:6d:19:24:57:2e:a7:22:73:36:b6:
de:0d:ea:f9:d5:82:c0:62:33:7e:1d:e0:08:e8:64:ee:5e:fc:
82:5a:0b:af:f4:ec:86:6d:f7:5d:78:6b:72:62:8b:97:97:dc:
51:a9:4b:51:61:f4:e9:90:e0:a4:ea:66:49:56:c5:66:c6:aa:
ce:f3:38:b0:af:bd:65:5f:d4:7d:fb:d4:4e:ff:08:ed:cf:18:
be:4a:46:e6:36:de:17:3a:c2:d4:e4:57:03:67:8d:55:86:d2:
eb:b0:05:37:fb:04:3e:5c:3f:d1:3f:c5:ec:6a:10:65:ef:3a:
7f:d9:d3:a7:08:e0:36:46:96:2a:b3:e6:e8:49:ea:12:4f:c5:
6b:1f:c8:da:17:ea:66:f4:70:e1:ef:78:ce:28:ea:8c:43:ee:
48:94:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:43 2025 by rpki-client