Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: cT+Jkjy7WMyItyzr+8u2sradp1HWJfa2gST5D1MHmlM=
Subject key identifier: 24:ED:64:6B:1E:E7:C2:58:8C:7C:A1:51:7D:F0:09:AF:8A:6E:3B:C3
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 01974A436FE2671CCFB647B5E85029B293DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0C8F
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: kjit/9PYJjP2a/m+byxQH/rY/Bro+0j1KqlNQM5pnG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6f:e2:67:1c:cf:b6:47:b5:e8:50:29:b2:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=24ed646b1ee7c2588c7ca1517df009af8a6e3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:0c:b4:e3:01:ed:7c:aa:fb:34:38:77:34:
74:02:40:b7:6e:31:7c:3c:01:ff:5a:85:a2:72:f3:
49:80:f6:42:c8:2e:25:41:1a:db:c9:40:4e:04:cc:
ca:e9:83:73:37:38:eb:a5:c7:4e:d9:22:e1:45:12:
66:66:93:7c:de:e3:02:1a:cb:d0:b9:d3:a7:ae:61:
96:55:37:25:f0:b9:e6:5f:55:7d:0b:b0:0e:c8:38:
a1:36:24:3b:6f:29:dd:6d:d8:5f:7e:f1:82:be:e1:
63:0c:79:bd:18:fe:e2:e7:d3:ab:77:2f:d6:9c:94:
f9:ff:6c:fb:bd:f8:79:a9:a4:c8:b9:8e:08:db:3f:
e6:e0:6b:13:d6:dd:15:d0:8b:5c:73:79:80:96:c9:
eb:37:31:9a:e8:af:41:d8:31:a5:a9:52:fc:08:22:
e7:d0:a6:37:29:4a:60:f7:c8:b5:04:bf:c6:50:c0:
fa:40:ad:28:4f:89:8a:a9:d6:d6:8b:86:a0:29:1b:
d1:d4:f6:f5:42:75:1e:f3:a5:17:79:ec:82:e1:12:
78:c4:d9:87:21:f2:2c:ca:45:51:51:97:74:8c:d0:
72:13:e1:33:c1:fd:5f:a3:a9:36:30:d9:a9:a5:46:
2c:f7:92:82:d5:02:0a:79:96:04:7b:c0:3f:4e:be:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:64:6B:1E:E7:C2:58:8C:7C:A1:51:7D:F0:09:AF:8A:6E:3B:C3
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b7:1b:3c:71:09:5d:01:83:9d:da:b5:e5:98:e0:20:68:91:
b9:da:17:5e:34:38:83:ba:38:ad:71:ad:2c:47:3c:e7:b6:17:
a3:98:23:8f:52:0f:e5:5d:46:7b:7a:e5:a6:ca:f9:7c:32:96:
7e:02:7e:95:e0:92:df:6f:65:46:2c:0a:76:c5:c4:41:58:b2:
cb:19:4e:9d:79:45:d0:f1:23:33:91:6f:e5:1e:34:8b:c2:49:
f7:e8:98:cc:31:d1:22:c0:9c:e1:eb:b9:25:99:20:7c:96:88:
18:76:8e:bc:6e:d4:8b:ed:4a:a0:08:96:9e:ca:29:73:11:8d:
1a:20:60:f6:38:3a:e6:d6:a0:64:12:93:bf:79:c4:8e:8d:b1:
13:8c:1e:93:82:d4:9a:4f:9c:7b:e9:c0:cb:fe:a4:be:c3:01:
75:53:29:4a:6b:3a:af:af:88:8c:a3:f9:74:0d:a9:ca:1f:3b:
85:3a:81:92:2e:12:32:78:a1:b0:1c:72:ac:f7:45:07:65:04:
fd:59:82:4a:10:52:ff:a3:3a:5e:cf:33:8b:06:3f:45:30:b9:
37:c5:d7:5c:2a:f7:db:1a:c9:97:13:f0:25:25:dd:6c:04:b3:
c1:c5:28:59:5a:88:c5:64:19:07:4f:46:a3:98:20:2b:1f:08:
65:2a:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:15 2025 by rpki-client