Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: qPx/6PrPez4u0xvmNfFaSRkDH6tRqvk4gDF5RP2VBoo=
Subject key identifier: EC:DD:D7:13:7B:24:32:17:C2:8C:78:FE:6B:81:B8:42:B3:21:FD:4F
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0197499F0A6B8D8D5F039DE2A12C2549DAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:48 +0000
Manifest this update: Sat 07 Jun 2025 09:00:48 +0000
Manifest next update: Sun 08 Jun 2025 09:00:48 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: 3qu0shFJLzjlJLhRno2Fop5TheTKBFqgRYYqW/45o9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0a:6b:8d:8d:5f:03:9d:e2:a1:2c:25:49:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jun 7 09:00:48 2025 GMT
Not After : Jun 8 09:00:48 2025 GMT
Subject: CN=ecddd7137b243217c28c78fe6b81b842b321fd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:9b:16:a3:f2:51:20:1d:59:99:35:f6:fb:
f3:75:fa:83:c1:50:58:2e:82:38:14:f3:36:fc:26:
ea:c2:5d:16:e3:9e:55:8a:c4:2d:76:b2:37:3e:11:
b6:e5:f2:c0:b5:43:69:c7:9e:6b:43:93:b5:60:77:
0b:14:87:2e:0c:46:a0:ed:bd:98:ae:af:a3:cf:c9:
26:64:70:f2:50:70:85:48:16:63:f1:19:92:57:5a:
cb:a9:9f:1f:5c:45:e4:ef:9c:af:f8:16:94:01:f1:
67:44:53:4d:8d:ed:30:d3:b8:58:bb:ab:6f:68:5f:
a4:fc:3b:50:c8:71:69:53:a0:89:3e:48:d6:94:5a:
ca:a4:dc:7b:a0:84:80:a3:a0:50:28:66:1e:cb:5b:
e9:ce:ee:23:54:9b:a3:bc:1c:17:f2:37:ca:25:08:
3c:6a:43:53:68:86:8d:32:a8:04:40:b0:19:c9:4b:
fb:d5:95:d4:f2:22:c1:a4:a9:7a:f5:47:48:30:ef:
84:3c:45:32:92:fd:ca:fe:5d:c5:37:da:10:35:00:
73:72:64:c1:16:8a:e2:c9:c2:f9:23:a8:59:6f:69:
59:3b:03:36:7d:93:c6:0f:0a:62:cc:9d:41:bc:3a:
3e:e2:ba:75:45:2d:d8:9d:35:9f:c2:87:3f:1e:9b:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:D7:13:7B:24:32:17:C2:8C:78:FE:6B:81:B8:42:B3:21:FD:4F
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fc:7e:c6:16:8c:51:09:3b:40:d8:c7:be:2c:c5:53:4a:83:
77:97:fb:68:bd:bb:6c:17:f0:dd:5f:2b:71:68:84:e4:7e:58:
da:34:e1:87:8d:39:6c:1a:f8:a0:42:b7:d6:d4:5b:47:a3:5b:
b2:e1:9f:7e:1a:76:51:5e:02:27:da:92:ab:6e:9e:27:eb:07:
0c:a8:21:f1:d6:45:87:14:ea:ec:dd:fd:82:1d:65:37:a4:ae:
37:be:e7:91:98:09:bc:7d:74:4d:4c:0c:3d:82:5a:e8:70:7b:
41:44:2f:76:55:de:82:8e:44:a8:e3:7d:a8:82:ca:b1:47:f7:
4c:71:d6:ab:e1:7a:14:eb:88:d9:cd:16:c8:cf:1e:d8:a3:bf:
4b:62:6d:7c:16:66:82:62:b6:d9:c3:d5:1a:3d:d5:57:d2:1f:
a6:47:2d:37:2b:83:84:11:f2:b0:41:3e:86:da:cf:92:0a:b6:
d9:fe:3a:77:2d:93:79:47:39:17:c1:3a:63:7f:24:38:85:c9:
80:10:42:e4:96:75:78:a2:e3:b5:80:ee:47:a9:66:49:7a:48:
20:f1:77:d0:b9:d5:d8:9b:e2:94:d0:d9:64:d2:f5:f8:20:3b:
98:27:1d:00:cb:e2:72:6a:b3:11:2a:7c:e3:f3:be:75:ca:dd:
f9:78:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:52 2025 by rpki-client