Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: SUxEMHqi8uW1SJRcwFLnRffNQ0jpLse49bKGnpLiG6s=
Subject key identifier: 45:9E:D5:A6:9E:5D:9E:4D:CE:63:54:D4:8D:09:62:AA:5B:EA:98:64
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019748FA60CBAE731350A80AF3B3B4A36A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0942
Signing time: Sat 07 Jun 2025 06:00:57 +0000
Manifest this update: Sat 07 Jun 2025 06:00:57 +0000
Manifest next update: Sun 08 Jun 2025 06:00:57 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: DWRXlaMhJ2nDWsktVrXPRVQwmfIkUONIwjTH0P4Ylhc=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:60:cb:ae:73:13:50:a8:0a:f3:b3:b4:a3:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jun 7 06:00:57 2025 GMT
Not After : Jun 8 06:00:57 2025 GMT
Subject: CN=459ed5a69e5d9e4dce6354d48d0962aa5bea9864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:49:71:c7:0b:9f:b7:56:27:73:dc:a9:44:
fb:ea:5a:ed:6c:4b:6a:79:ce:16:83:81:0f:09:0f:
16:3c:6c:b0:c0:c6:ca:ac:fe:b7:43:c5:70:0a:0b:
6b:08:4b:04:81:ce:35:56:4d:7d:1b:0c:0d:56:06:
93:0d:4e:f6:a3:8f:96:aa:78:fe:ef:01:12:32:66:
69:4a:31:04:56:29:03:df:0c:d6:36:92:a9:ae:58:
f4:20:0a:de:84:0d:65:94:ae:38:23:74:ea:20:0c:
71:7c:0a:42:33:8e:79:b1:f2:05:b2:39:41:8d:f4:
1d:58:9a:75:09:7b:b0:a3:7d:a4:79:01:1b:65:0c:
11:a9:8d:6f:83:d9:5f:8e:28:4f:e8:ad:94:eb:8e:
f2:8d:c6:be:e6:31:81:2b:b6:3e:e3:33:a9:50:37:
10:18:a7:df:27:7d:8c:ec:53:c9:1b:a1:3c:23:bd:
cd:3b:24:f2:1e:f3:d9:30:f9:c0:86:88:3e:7e:cf:
81:4d:76:85:3b:38:96:45:4e:b5:7e:3b:7d:bf:e3:
ae:b1:fb:e1:0c:99:2f:98:69:6d:e2:a5:56:60:8e:
66:88:c5:59:2c:26:d1:ba:8f:cf:31:01:6b:c1:35:
56:db:f6:e0:a0:d8:a1:77:6d:69:ad:51:2c:e7:cc:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:D5:A6:9E:5D:9E:4D:CE:63:54:D4:8D:09:62:AA:5B:EA:98:64
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:64:30:b2:0d:17:87:b9:71:26:b7:7a:27:e4:f7:84:c3:
b4:d7:c2:5e:a2:7b:e9:04:f3:cb:af:ab:6b:96:3a:a3:c9:23:
23:dd:e4:de:89:c5:88:32:98:ec:27:db:d4:1d:47:b5:c3:b2:
f8:05:6e:d6:47:3b:c4:c7:11:a1:d3:28:a8:7a:61:70:bb:a7:
37:c5:22:ba:9f:fe:8d:07:f0:d2:a8:20:c5:e7:bc:a8:e1:c0:
47:a6:e3:1b:e6:12:c5:d3:bd:16:59:de:0e:91:9c:42:ad:76:
9a:1f:3e:a2:c0:95:76:65:59:0c:42:cc:09:dc:7f:85:ef:76:
16:67:68:21:9c:fb:81:f6:48:cb:e8:ec:e5:70:d7:cf:89:69:
13:d7:02:a9:7b:03:03:46:1a:45:1e:37:5f:37:f7:51:9b:4e:
11:18:7c:22:bb:79:b2:dc:02:0d:b6:1a:16:d0:25:1c:08:e5:
a1:be:a6:7b:2a:b2:78:b0:46:96:ef:24:4b:90:e8:91:88:7e:
c2:39:4c:d9:48:3a:f0:3f:4c:94:80:da:33:4a:2f:5d:8e:47:
80:25:98:60:4b:c5:1a:53:13:7b:2c:9a:2a:ee:58:79:92:35:
e7:3f:75:81:54:c8:f6:aa:47:9d:c2:c9:42:26:fd:66:bb:6f:
77:c2:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:27 2025 by rpki-client