Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: s+iYZMTXNhA5hOBS3zsIhhdM384h+JadSLOF7W8ywIA=
Subject key identifier: A8:38:D5:3A:11:DA:30:EF:AE:76:6C:C2:59:F5:0C:A9:94:AD:5A:1B
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 01974DE9CF710E79B5A4295F19AF401A1CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0D82
Signing time: Sun 08 Jun 2025 05:00:57 +0000
Manifest this update: Sun 08 Jun 2025 05:00:57 +0000
Manifest next update: Mon 09 Jun 2025 05:00:57 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: FWFfiC/yHgDniM+lH9kMp3S3rPJusL5Lyi4KqGcoWNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:cf:71:0e:79:b5:a4:29:5f:19:af:40:1a:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Jun 8 05:00:57 2025 GMT
Not After : Jun 9 05:00:57 2025 GMT
Subject: CN=a838d53a11da30efae766cc259f50ca994ad5a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:1a:4a:70:e1:3b:e6:5e:95:e5:0b:6f:99:
ea:97:79:ab:27:42:a2:c8:a4:ac:7a:ac:d7:7a:fa:
c7:07:65:49:5f:8b:78:5f:fd:19:36:eb:ec:ee:1e:
a7:52:5b:78:cd:63:03:f0:95:a8:13:94:f5:00:f2:
82:9a:aa:bd:c5:12:0a:83:fb:38:49:4e:7c:7b:59:
7b:b4:fa:09:9a:f4:98:d2:8b:9a:c0:e1:db:18:3c:
c5:97:30:b6:6f:ac:b4:12:c7:3e:7f:a6:4f:81:37:
46:bc:09:7c:97:5e:c2:f1:2d:00:cb:82:7a:97:fd:
5b:4c:ea:ea:29:c2:95:7d:b3:4d:72:17:45:a4:a1:
d7:ec:94:e3:3f:dc:b1:64:cb:a6:4a:20:94:c2:b8:
c2:79:ce:1d:33:a7:72:f2:5d:5a:16:93:56:60:2f:
d6:2f:4a:a8:34:7b:35:53:ed:bd:a7:aa:de:64:f9:
db:aa:d0:4c:43:7d:7f:b1:5a:1d:8f:27:dc:05:1d:
94:36:b7:d3:f0:03:0b:6f:4c:46:b0:56:2b:08:34:
ae:73:79:f3:5e:dd:9b:24:8a:5a:92:78:21:51:1c:
1f:34:4f:7c:e8:b2:1b:d1:11:8a:bb:2a:e4:2f:e5:
ee:f6:6f:48:aa:c7:6f:bd:6a:02:2c:35:fb:a1:6c:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:D5:3A:11:DA:30:EF:AE:76:6C:C2:59:F5:0C:A9:94:AD:5A:1B
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:14:2f:fb:c3:ec:2e:0c:fa:41:67:fb:9c:63:b9:be:c4:
b1:d6:9f:cc:44:db:41:08:32:e7:da:01:72:68:31:4e:5d:a6:
12:a8:c7:f7:90:7e:40:89:c9:13:a7:2c:e1:01:21:9e:67:54:
e1:41:ca:e9:8e:a2:f7:b2:f6:87:56:36:f8:5f:d6:1e:06:96:
d1:1b:2e:19:c7:b3:1f:43:40:2c:2a:70:aa:2b:3a:49:60:46:
cb:cb:1b:3c:d7:ce:db:de:d6:54:44:f6:a2:4b:a9:5d:10:3f:
b9:81:a6:74:1c:a2:2e:1a:2f:55:c8:ae:08:ba:43:62:c8:1b:
35:78:15:92:83:61:a6:80:09:73:55:ae:67:cc:08:ab:27:96:
ba:3b:4d:82:5c:ce:00:87:23:be:54:51:c7:2e:46:8a:3c:c3:
e9:57:41:e5:0c:8d:07:44:60:ae:d3:f5:2d:b5:eb:14:73:b9:
ca:be:e5:0c:4d:03:cd:06:54:0c:a6:1b:1e:31:8d:93:67:09:
c8:de:ad:5f:b6:5f:ee:a1:63:c7:a3:4d:25:3b:86:d4:15:a1:
9a:d0:e1:dc:e2:87:17:a0:11:35:e7:94:ec:78:e7:6a:a6:ba:
04:ac:60:dc:d1:9a:a1:38:6a:1a:6f:3c:df:76:32:24:3a:c6:
8a:b5:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:32 2025 by rpki-client