Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: ZS4l3vriL4gI/b4n8cPPMWYQU9CeyevtCtPIp0r2QXk=
Subject key identifier: EA:AC:57:C3:95:BE:69:F9:39:0F:69:E3:19:E6:5C:6A:4E:D0:27:14
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01974A0C8486E90E09D1BD9D176180C9046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 11:00:23 +0000
Manifest this update: Sat 07 Jun 2025 11:00:23 +0000
Manifest next update: Sun 08 Jun 2025 11:00:23 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: a7wM12bC5Kcquiq62MrgXQ3W1RawRJPPnJPPExVf4fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:84:86:e9:0e:09:d1:bd:9d:17:61:80:c9:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jun 7 11:00:23 2025 GMT
Not After : Jun 8 11:00:23 2025 GMT
Subject: CN=eaac57c395be69f9390f69e319e65c6a4ed02714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:a7:26:51:e5:e3:3a:e7:db:e9:02:97:f6:
56:0a:0c:1c:3c:53:50:86:e8:77:b8:ed:6b:62:c3:
ce:6f:61:28:37:68:22:a4:97:75:bf:68:8a:a3:dc:
6a:9e:54:8c:c0:e0:be:b1:2a:02:01:97:25:85:0b:
54:71:49:0b:72:61:3e:93:7f:07:ea:a1:d0:01:71:
40:88:08:a3:a0:9b:28:34:fb:b5:7e:79:be:9e:9e:
04:7b:57:b7:0d:17:bf:e2:ce:1e:da:c0:6c:7e:ef:
0f:3f:28:9c:24:ba:10:ff:60:88:ee:4b:42:8c:66:
ef:bd:1e:7f:a3:97:1a:53:d2:9b:63:3b:1d:6d:ec:
87:33:31:ab:b9:fd:87:6d:ba:89:9b:7c:28:10:52:
62:bc:d0:f8:95:cf:33:07:e6:ee:9c:39:ec:92:ff:
9e:02:d5:fd:55:d8:95:82:10:5d:dd:88:38:60:d6:
a7:2c:7c:b4:11:6a:59:a3:64:26:ba:f2:0b:d8:21:
88:4b:38:41:ef:8e:f1:c4:7d:20:3b:16:28:ca:2c:
70:2c:c7:29:53:83:71:58:49:ae:19:25:bb:aa:b5:
e4:6b:14:90:86:ca:16:f3:6e:9a:74:a8:b9:57:bb:
f5:0d:ad:a7:3d:e2:69:48:3b:44:72:d5:b8:e2:6f:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:57:C3:95:BE:69:F9:39:0F:69:E3:19:E6:5C:6A:4E:D0:27:14
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:85:d7:4b:4b:7e:4d:2c:1f:cb:f4:c9:52:0f:1f:cb:d4:
64:c2:c1:ee:ec:97:97:12:cb:28:1b:4a:ee:8d:f5:7e:13:6d:
ec:86:2d:a4:f7:cc:9f:d4:be:50:29:0a:b4:ce:c1:6d:17:50:
78:59:a1:72:9d:60:aa:02:c9:40:29:ef:c7:e8:7f:96:35:af:
36:9b:16:57:f0:4c:59:1b:14:73:4a:53:20:60:41:26:f5:84:
0c:db:5f:d1:ce:bc:4b:47:c4:ad:ea:e1:78:90:e3:50:21:a3:
06:63:ec:95:ab:6e:06:5e:ce:03:65:99:8a:da:d7:2c:1c:71:
09:d0:da:93:32:d3:21:ec:3e:82:a5:04:9c:5e:77:58:b4:5e:
6c:d0:72:8c:c9:f2:58:55:cf:25:5f:6c:19:b2:aa:81:3e:8b:
bf:f1:ce:ea:a9:18:d3:6b:6e:68:7c:52:8f:d0:3d:73:5d:74:
78:a1:28:bc:e8:cc:00:ed:ee:97:06:62:83:6e:35:0c:98:45:
ae:c2:61:b3:86:41:5f:01:70:06:5d:77:14:81:76:5d:9d:8b:
40:ed:87:0b:75:03:59:81:d5:f8:44:80:0a:b5:2b:73:38:a1:
59:e1:7c:0d:cb:66:fa:8d:45:08:35:f4:c8:6b:0e:a1:f6:84:
85:7e:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:27 2025 by rpki-client