Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: vqkXpgF8y2Fsn0oCCSHhs0UozWb9KIxjxisk+N3pVqs=
Subject key identifier: 42:91:41:7A:21:8D:AE:63:D5:55:F6:95:B3:A7:2E:67:7D:59:0D:28
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019745C243801167E74E73787E21DB21F39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 03B3
Signing time: Fri 06 Jun 2025 15:00:48 +0000
Manifest this update: Fri 06 Jun 2025 15:00:48 +0000
Manifest next update: Sat 07 Jun 2025 15:00:48 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: akmOGKhwhKo200pRTT4rX1brCF9Q5XRoKgIbt0XcAUY=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:43:80:11:67:e7:4e:73:78:7e:21:db:21:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Jun 6 15:00:48 2025 GMT
Not After : Jun 7 15:00:48 2025 GMT
Subject: CN=4291417a218dae63d555f695b3a72e677d590d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:f8:6c:d5:2d:ea:4f:b4:a8:21:c2:07:71:
10:08:5c:a3:66:41:4a:66:04:ba:b8:ce:eb:e4:8b:
94:eb:d7:ca:3a:26:28:3c:f4:52:04:e3:24:41:15:
91:b4:5e:a1:ce:45:91:2b:c1:e2:3f:90:8f:9e:1e:
8f:94:86:28:91:19:6d:79:c6:23:7d:40:42:46:da:
ad:4f:44:14:4b:e5:95:a2:81:9e:36:f6:28:64:1b:
18:6c:dd:16:6b:49:89:06:bb:01:2e:d6:65:59:1c:
29:60:f5:62:ed:0d:8d:b4:dc:16:27:d0:d5:19:14:
d1:04:c1:61:db:c9:28:3f:d5:eb:6d:df:7f:a7:32:
d4:c9:f0:a6:85:05:99:a8:09:33:67:b4:6b:51:de:
40:69:0b:32:ee:4d:a1:43:01:5f:75:f1:35:63:7c:
40:06:14:7e:5e:4a:31:36:fc:08:e9:d2:af:48:a6:
8d:c8:4c:9b:8e:2e:d9:2f:e5:14:f3:3c:56:00:d3:
11:1d:43:97:c9:be:95:cd:dc:74:f8:f4:51:84:8f:
a4:79:84:7d:5e:d8:9c:9e:9b:cc:d9:9a:6a:2c:8f:
2f:23:b8:1b:72:28:40:d6:44:db:13:85:56:20:c2:
4b:a4:16:2a:56:6b:61:7e:d2:e7:ac:82:b8:f2:21:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:41:7A:21:8D:AE:63:D5:55:F6:95:B3:A7:2E:67:7D:59:0D:28
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:91:eb:aa:e8:91:f5:8b:45:75:ef:d6:48:fe:ee:28:aa:
7a:05:02:4d:63:77:01:5f:e2:13:fa:10:4a:89:f2:1c:48:ac:
e8:32:9a:c6:e7:ab:31:6a:4d:2c:93:43:53:72:a5:42:a7:40:
92:a2:2f:ae:63:12:95:f8:54:f4:02:ba:64:d6:96:bb:dc:74:
7a:c5:28:ea:3f:39:4b:eb:5d:d8:58:36:99:44:de:41:4e:06:
32:8b:23:6e:fc:d0:8c:db:1e:e8:ac:e6:6f:cc:dd:d7:4f:a0:
a9:ab:8e:c1:ff:b8:ef:d1:5d:37:ac:27:e3:dd:e2:c1:ac:d5:
66:e9:9b:dc:6d:34:67:5b:55:df:06:7e:67:39:0e:bc:2e:cb:
f8:1d:3c:af:a0:14:a2:02:4c:11:92:5e:2b:92:c8:aa:cd:df:
62:63:dc:a5:e4:dc:a7:fb:0d:63:91:5e:79:7e:22:04:4e:a3:
2c:82:cc:20:ea:92:6b:04:6c:10:5a:ce:f0:06:ad:91:2e:cf:
d5:aa:52:0f:8a:80:43:92:bb:f8:b1:36:4d:5f:1c:04:67:d8:
81:34:9d:38:5a:de:24:e4:04:74:6b:66:2e:25:a3:a9:f7:76:
dc:95:c7:4c:48:0d:c6:83:c8:c5:8c:e4:85:2b:fb:40:3f:17:
d1:f7:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:18 2025 by rpki-client