Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: cPFm816UIlw6AVjbY0OYpiC+8lDl2HSfZqTAXCICULk=
Subject key identifier: 04:93:7D:FE:59:88:3A:0A:97:19:F2:B4:C8:1C:26:67:7C:D7:B7:8A
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 0197B88FF8A084E1EAC66CBD661229E2D5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0AD6
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: kjiTZ6NGohcOsIniNVEjOW6LxJ87kvNTS9zpum0mqVo=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f8:a0:84:e1:ea:c6:6c:bd:66:12:29:e2:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=04937dfe59883a0a9719f2b4c81c26677cd7b78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:f8:a4:7e:e8:09:b8:1a:d6:4c:bb:b4:14:
f8:1e:4b:f7:80:df:41:fe:65:e8:2d:1c:ea:dd:c8:
ca:12:98:e4:f3:ee:50:53:51:2a:5a:05:c8:35:bb:
5a:61:f1:1a:f3:ea:da:eb:07:9b:96:51:62:12:b4:
e3:54:05:52:e3:fb:79:3f:6a:c4:da:47:4d:e6:35:
32:b7:56:81:b9:4f:33:44:9d:25:6f:44:3d:92:79:
0c:c3:8c:50:1b:4f:d3:72:1a:bc:4e:03:94:40:52:
56:d5:61:ee:2e:50:2a:32:89:23:7e:4b:bb:13:1c:
1e:96:02:08:3a:5e:fc:b1:e1:d4:67:c7:f0:f6:f9:
f1:63:99:05:87:60:35:0f:18:ce:f7:cf:ae:aa:1d:
c8:16:45:a4:8c:c7:98:d0:df:56:b1:87:9d:e5:31:
37:3d:3f:38:38:67:07:b9:c3:48:a8:88:44:be:f0:
bf:d8:ba:11:c9:83:6c:84:9b:66:e7:3f:c2:bb:1f:
ed:46:0b:5d:d3:c2:7b:fc:55:43:90:1d:cf:6d:e7:
c4:fc:38:02:e8:b4:c8:34:2d:76:35:f0:0d:42:96:
a1:e1:82:83:3c:7e:62:61:07:13:f4:42:47:2e:ff:
e6:39:a9:bd:a1:51:bf:98:a5:d2:08:ee:f8:8a:db:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:93:7D:FE:59:88:3A:0A:97:19:F2:B4:C8:1C:26:67:7C:D7:B7:8A
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:b2:f3:67:1a:98:53:b0:4c:5b:48:9d:e1:66:23:10:1d:
d9:67:d0:4f:7f:2a:44:4f:13:63:25:9e:87:0e:a4:2d:81:37:
30:a1:16:da:92:29:15:fb:5b:86:b9:e8:8d:35:81:ec:54:f3:
e4:31:a4:fc:84:7c:c9:86:e8:9d:b3:43:77:ba:3f:bb:1b:ee:
55:35:dc:e5:12:51:e8:b1:c1:8a:b2:f5:5e:8b:ac:4d:ba:2c:
06:d6:71:2b:55:ec:8a:00:4d:6b:ef:d1:0d:1d:54:e8:e5:6c:
c5:61:da:17:d0:e5:54:ff:58:75:c1:57:03:61:7b:2a:d2:36:
0b:3c:31:c6:c2:79:b7:78:eb:bb:e1:df:92:07:22:b7:6d:1c:
95:7c:27:e3:b7:17:aa:66:e8:a0:79:d2:eb:a8:59:14:89:ee:
43:fa:51:95:ed:d5:8f:2b:29:80:e6:e1:05:c2:bc:f9:f7:c9:
9c:b3:49:0a:bb:48:b2:5d:36:7c:ed:39:58:3d:7d:8e:b8:da:
45:7a:b2:5c:9b:24:71:f5:e0:e0:86:7d:18:69:49:9d:83:2d:
15:ab:96:88:0e:d8:96:35:12:dd:ab:79:52:d9:63:e3:1d:d5:
c5:40:93:60:31:e0:01:5a:82:bf:e3:a5:74:b5:a4:4b:82:3d:
69:b6:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:31 2025 by rpki-client