Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: m/feLoiCtW7pgs28gBngzcl1HvF1M4OEDDjlwC8jakg=
Subject key identifier: 6A:1A:9D:94:47:D0:F3:78:5D:0C:C0:50:8E:B2:E2:44:5F:2A:38:75
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 01975459C687A740BC98A0796589FE64E532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0939
Signing time: Mon 09 Jun 2025 11:00:58 +0000
Manifest this update: Mon 09 Jun 2025 11:00:58 +0000
Manifest next update: Tue 10 Jun 2025 11:00:58 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: 5yd8gfTpi5eb4S7x1CIQz8aQkRHpiaMFwTnWX7VD4MU=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:c6:87:a7:40:bc:98:a0:79:65:89:fe:64:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Jun 9 11:00:58 2025 GMT
Not After : Jun 10 11:00:58 2025 GMT
Subject: CN=6a1a9d9447d0f3785d0cc0508eb2e2445f2a3875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:32:3b:9e:57:de:46:d2:b4:b2:ab:00:c6:
4d:bc:74:54:79:12:80:fd:54:28:ef:74:98:bb:98:
69:64:06:dc:f5:15:f8:49:67:09:b8:73:03:bd:4d:
a6:38:ac:be:69:74:75:7c:83:6d:85:0f:fa:4a:78:
03:98:33:63:d9:0f:5f:05:24:8c:34:ab:3d:ee:ca:
ac:a6:60:d1:7e:3b:d6:b6:82:e9:3c:6b:69:08:42:
c1:aa:3f:c0:c4:ec:fc:13:1a:c2:0f:88:c6:5c:23:
6c:d8:7e:04:10:1b:7b:b5:9c:58:76:ba:53:0a:42:
a2:e9:db:71:0e:92:b3:6b:70:4a:9e:4f:ea:53:c6:
aa:40:1b:1e:4d:59:56:5f:c7:23:1d:3d:be:78:1b:
29:d0:07:b4:62:9a:07:65:93:d0:97:01:40:d0:9f:
d0:c5:2e:9a:1f:cd:44:57:f0:05:6c:fe:dc:65:ce:
44:0d:61:4b:6c:b3:53:9e:d7:7f:ea:12:f8:5c:ac:
33:fa:56:cf:f2:93:f0:d1:26:ad:f1:23:46:c9:30:
39:46:bd:be:fa:59:68:d2:28:21:b6:33:67:ca:5a:
1d:e7:80:06:9a:8f:2f:c8:02:dc:05:4e:35:30:ea:
31:42:ce:6c:c4:90:d8:35:44:4a:80:6e:b1:af:63:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1A:9D:94:47:D0:F3:78:5D:0C:C0:50:8E:B2:E2:44:5F:2A:38:75
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:1f:b4:6c:81:16:fd:5d:f4:68:79:8d:03:71:85:84:d3:dd:
57:e7:7a:19:92:6b:fd:73:52:49:60:72:5b:ba:47:b7:45:c2:
4d:ac:2b:41:e5:e3:79:1a:33:24:d3:cb:42:18:52:89:7e:73:
33:79:5e:b1:6b:55:9e:73:91:03:c4:67:9b:20:bb:c0:86:11:
cf:39:d8:63:c4:ee:ed:72:bc:17:1c:bb:55:91:47:b4:3b:28:
47:30:c9:c2:89:99:57:37:71:28:09:ff:8a:01:b2:d0:4d:70:
c6:d1:97:e5:74:71:94:da:c0:09:86:d5:b9:da:33:ff:4b:af:
fc:54:16:70:31:9b:3f:a5:5d:b6:73:8b:de:83:e2:b0:1e:c8:
6d:d4:0d:5e:95:c9:19:ea:b1:fb:6b:89:f9:a3:46:36:fb:04:
15:59:cf:db:cf:74:88:b8:c2:79:df:35:b7:d9:27:69:05:2b:
0e:e8:31:2e:24:0e:d9:46:5d:02:ef:2b:61:f1:77:62:ca:36:
8d:99:04:c2:de:12:bc:ce:27:42:4c:f0:af:db:eb:2d:d8:bb:
e0:78:97:46:8a:07:10:62:7a:3a:00:47:69:cd:3f:26:6c:8f:
c6:b5:8c:0a:c4:e6:7b:ca:6c:15:c0:1e:a5:76:bb:0c:4a:06:
3f:7c:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:06 2025 by rpki-client