Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: h4Yh7f24ot8bCgtVKMe3dVxftC0b47vi1kjdBotaoJw=
Subject key identifier: 74:DA:C0:63:58:9E:35:65:6D:70:37:FA:69:6F:75:16:CF:0E:10:E6
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0197C9F078F7ECF0A0B2DADC189115365358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 34
Signing time: Wed 02 Jul 2025 07:01:09 +0000
Manifest this update: Wed 02 Jul 2025 07:01:09 +0000
Manifest next update: Thu 03 Jul 2025 07:01:09 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: dD2kbWQlrKSgJzvVqwT3ltXSb3tO7X94l7vfpyAEx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:78:f7:ec:f0:a0:b2:da:dc:18:91:15:36:53:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jul 2 07:01:09 2025 GMT
Not After : Jul 3 07:01:09 2025 GMT
Subject: CN=74dac063589e35656d7037fa696f7516cf0e10e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:e9:bf:ab:cf:3f:f1:67:82:f4:09:55:28:
62:40:23:ba:be:3f:37:13:81:83:c0:b9:fd:bb:37:
bb:6d:97:95:87:e0:04:ae:4d:9b:be:f0:54:68:47:
66:a2:41:50:a7:31:b2:2a:17:54:33:ca:a2:cd:c8:
1c:ff:17:6d:12:1d:25:9c:4a:c4:79:1f:ac:d5:5c:
11:98:eb:fd:c0:46:f2:de:b2:e1:3c:83:e7:be:15:
d6:12:c5:af:c1:fc:66:d5:1a:d8:71:c5:75:45:28:
7c:ac:03:15:de:a0:6a:84:d6:f8:b0:a3:f4:8b:e0:
fa:05:9e:ea:ab:4d:89:ff:40:b0:c7:87:96:af:33:
a5:15:bf:a7:07:af:ed:de:86:c5:a0:a4:ef:bd:7b:
13:82:96:1d:a2:4a:a7:b7:ab:63:87:82:2e:80:bc:
24:1e:12:91:0d:7d:cd:90:7f:4c:cd:ea:50:1c:a6:
17:50:4e:7f:db:93:da:57:e6:24:d4:e9:ab:79:0b:
b5:c0:d3:90:1a:e1:b5:61:e2:f0:1c:f2:d6:b0:58:
29:33:77:ec:bb:2a:61:f7:b6:f6:e2:88:f8:6e:af:
75:6c:8c:51:94:78:84:73:c7:92:37:ca:04:b3:dc:
59:41:c3:74:69:25:90:f7:8f:c8:57:87:11:af:16:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:C0:63:58:9E:35:65:6D:70:37:FA:69:6F:75:16:CF:0E:10:E6
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:81:c8:be:e9:bc:51:48:c4:9d:96:b4:b4:ad:fc:0c:60:
53:03:a6:dd:0f:6b:5a:71:2a:57:fd:2e:fc:73:d8:9c:ca:08:
df:59:62:f3:e7:b5:fd:76:64:cf:7a:6d:3e:29:aa:8c:41:b0:
c5:b0:35:42:87:e4:18:86:24:d8:4e:e7:31:da:04:bc:3a:37:
78:86:56:b0:a6:95:a7:ba:80:1e:2f:18:e7:2a:7d:f5:ff:1d:
94:a1:88:a4:cc:2f:a3:e9:20:5d:55:9e:6b:7f:01:f4:c4:71:
6b:4e:80:29:b0:ec:5e:45:f7:15:64:1a:18:59:22:46:04:58:
f2:b0:cc:d6:ca:d4:6f:5a:f9:fb:17:2f:a8:2b:59:88:75:ab:
bb:84:0f:dd:d2:f8:68:c5:f7:55:41:ef:6f:32:5b:2b:e9:35:
94:15:41:fa:ac:e3:aa:4b:fa:36:e4:ba:a3:45:49:20:dd:96:
39:f1:b1:9d:90:74:ff:99:b5:4f:68:65:0b:2b:d0:a4:ad:a5:
1d:bc:3e:19:ee:0d:88:a6:5d:74:e5:9e:ac:58:8f:f8:3a:e7:
b3:cd:5e:7d:67:25:64:18:52:99:b0:1a:ba:5c:a7:c9:b9:7d:
08:6f:6a:36:ef:51:68:a5:66:a6:9b:15:69:87:c7:49:9e:7a:
85:38:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:56:12 2025 by rpki-client