Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: dqI+ibCIAHVlREU2N6bAahbStby54+a183S6suaB88M=
Subject key identifier: 2A:F6:AE:49:04:DB:11:A2:DD:3E:BC:E0:6E:D7:9F:A9:AC:5D:11:56
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 01974D45272DA33D14BF442A7B1F8570B4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 09F3
Signing time: Sun 08 Jun 2025 02:01:06 +0000
Manifest this update: Sun 08 Jun 2025 02:01:06 +0000
Manifest next update: Mon 09 Jun 2025 02:01:06 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: AeoDN+Q818H64x4rl+tVtC5lxWzIXT/eRs4XgIEGY2s=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:27:2d:a3:3d:14:bf:44:2a:7b:1f:85:70:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Jun 8 02:01:06 2025 GMT
Not After : Jun 9 02:01:06 2025 GMT
Subject: CN=2af6ae4904db11a2dd3ebce06ed79fa9ac5d1156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fb:6c:68:4e:4d:1d:65:64:bc:11:a9:39:3e:
30:b9:64:39:96:b2:ce:fb:39:ef:ad:9e:fb:8c:4e:
9a:4f:e0:4f:e3:0e:52:25:4e:1c:75:e6:57:a2:10:
50:44:2c:3e:13:05:a1:66:f0:45:08:59:7a:d4:d1:
75:27:7d:7a:b4:a2:a3:85:ce:b7:9c:6b:94:57:6f:
d7:34:33:b4:03:d1:82:8c:8c:1f:a7:24:74:69:bf:
c1:21:25:f2:ac:7b:02:67:4a:49:05:2f:e6:53:2a:
d1:dc:b4:7e:32:b7:79:83:b7:fd:27:c6:1d:83:b7:
b1:4e:ae:c6:2d:9e:45:5e:c6:99:76:22:0c:b8:c3:
20:5e:1a:38:57:c5:35:41:68:58:39:69:0f:18:19:
34:35:99:92:f3:6e:0e:13:45:af:73:c4:90:c1:cf:
fe:1f:17:87:e3:ae:19:db:5d:37:f5:c4:2b:06:4d:
77:da:6e:f1:33:b8:1f:8d:e7:6d:0b:4d:5c:cb:91:
dd:5f:97:6c:0c:e3:9a:1d:60:10:28:09:bb:b0:59:
9b:1a:c1:82:16:b4:2f:bf:01:ee:75:65:d0:45:ee:
d6:f2:06:c8:55:ad:27:06:5a:8f:39:f1:30:61:dd:
4c:90:56:4f:d8:de:96:ff:9b:53:1f:e9:d6:80:f0:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:AE:49:04:DB:11:A2:DD:3E:BC:E0:6E:D7:9F:A9:AC:5D:11:56
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ab:a7:89:ff:6d:55:db:52:7e:9b:97:3f:0f:c8:59:cf:9a:
62:2d:32:26:e2:54:17:e9:6f:b5:83:61:37:d2:6c:81:47:dc:
56:b1:19:a6:b9:03:c8:f4:66:4c:e9:ef:7c:4a:ea:b5:ae:fd:
99:99:b3:f5:58:69:f6:47:1b:d6:81:b3:14:32:87:e7:c2:b7:
3a:a7:6e:60:0f:9f:76:05:14:28:27:3f:b6:78:15:63:0d:68:
d9:8c:80:1a:b1:c8:55:53:29:3e:2b:08:ea:1c:45:c5:b9:3d:
dd:7c:e2:32:5e:2b:14:d2:fe:cf:ba:a5:e7:16:78:08:9d:d6:
f2:64:c7:de:07:cf:11:6c:95:00:3f:77:41:61:4e:41:b7:35:
fb:ea:f8:3a:ec:c9:c3:2a:ef:18:13:dd:18:74:46:d8:56:ae:
30:b1:24:f1:1c:96:31:99:ad:6d:55:61:76:a2:3e:3d:89:cb:
8a:db:fe:6a:86:33:d0:30:a4:ac:8c:84:0e:f9:1d:78:27:49:
fc:6e:c1:37:45:6a:88:28:a0:9f:8e:22:75:11:38:2d:53:04:
e4:1d:6e:ab:0f:52:bd:96:d6:69:1d:c6:9e:c5:8f:27:83:93:
3e:9a:cc:de:05:b6:69:a8:b3:8b:fe:1d:79:3c:b1:ea:42:d3:
d3:c0:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:26 2025 by rpki-client