Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: ZByI93zvpCcCkbY3q34wY4OqaRO/JCkXlqGfXU1woTY=
Subject key identifier: 48:D1:6D:3F:52:69:D0:0F:E7:C2:D0:13:C8:C2:02:24:36:C7:8D:2F
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0197BA7DF15FC5BCAF92E85ABB07FC8C6AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0CC9
Signing time: Sun 29 Jun 2025 07:01:45 +0000
Manifest this update: Sun 29 Jun 2025 07:01:45 +0000
Manifest next update: Mon 30 Jun 2025 07:01:45 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: KR+ixbsbjfMR84OiNHdIB7Of+faArmQ5qOgGloHV3Bg=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:f1:5f:c5:bc:af:92:e8:5a:bb:07:fc:8c:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Jun 29 07:01:45 2025 GMT
Not After : Jun 30 07:01:45 2025 GMT
Subject: CN=48d16d3f5269d00fe7c2d013c8c2022436c78d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:82:44:fa:c3:f8:11:f9:dc:ac:68:0b:47:
ea:65:78:27:17:dc:49:88:8a:89:04:84:21:eb:71:
47:ff:ee:3d:e3:87:b9:76:06:86:d6:57:d6:9a:80:
38:fb:59:23:ec:fe:08:8d:59:da:ac:c6:b7:b6:85:
3d:5a:52:51:8f:11:ac:62:7a:ec:d6:2c:d0:a2:0f:
b2:39:0a:e0:77:eb:cb:56:78:f5:1f:d8:23:71:59:
bc:17:9f:e3:8a:d5:dc:84:93:fd:bf:7b:75:13:49:
a8:e3:3e:fa:16:e4:f5:dc:46:75:2c:f5:41:e3:6a:
73:0b:63:fa:22:66:d6:6f:19:12:2a:cd:04:6a:18:
c6:c0:81:a1:fb:a8:fe:02:ef:c2:d9:23:55:83:0a:
b2:98:f8:2d:8c:1d:5c:90:fa:61:48:d3:76:66:e8:
fa:0e:ef:aa:9b:09:57:44:11:15:77:a8:03:23:8e:
eb:20:c4:97:7b:2f:59:f8:cb:a4:c8:a8:e6:49:f7:
2d:87:a9:8c:09:73:74:c6:5f:4d:ec:30:af:ac:8e:
81:2c:7f:c5:d4:20:c9:ca:13:61:a1:74:05:25:37:
ce:cf:cc:83:c2:5b:9e:f8:2f:a4:aa:24:14:18:ba:
81:9a:a0:16:f3:fe:72:43:ae:db:61:ef:02:60:04:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:6D:3F:52:69:D0:0F:E7:C2:D0:13:C8:C2:02:24:36:C7:8D:2F
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d0:ab:9f:86:56:fc:3e:ef:1e:3c:da:14:77:d6:f4:ab:1a:
97:3b:74:b2:3a:b9:80:a9:6f:6a:18:42:58:22:d0:c2:28:33:
b9:36:cd:76:fa:4a:44:f5:59:1d:b2:96:98:b7:05:53:de:40:
6d:18:6d:ba:13:00:bf:88:22:55:31:20:40:f7:1c:0c:90:2c:
c5:f2:bf:14:29:c0:02:68:6a:94:da:d9:23:f0:b9:89:7c:6e:
6d:05:cb:5c:a9:d1:6c:6a:95:a7:0e:36:9f:fa:69:4e:6e:8f:
13:79:9e:80:0c:90:24:9b:95:73:4d:ae:88:4a:f0:6e:db:d2:
bd:db:78:a6:e2:bd:73:5b:11:8f:63:ca:b4:4b:75:83:63:cd:
13:2b:d5:37:e7:b4:f2:8c:0c:a0:4a:e5:10:54:72:cb:0f:7d:
e5:01:dd:57:6a:f0:28:2a:61:5e:aa:dd:33:17:84:fc:92:a0:
fb:fc:ac:a9:bc:ab:ae:d9:21:b5:1f:f8:a1:1b:49:2a:52:ab:
e5:c0:7a:44:39:f1:80:54:3f:a8:47:1f:cf:27:61:cf:d3:1d:
6e:e1:dd:de:6d:2c:bf:9a:54:4f:da:7a:da:98:cd:6e:b6:61:
9f:8d:1b:e3:db:73:b6:93:0d:e8:d2:48:2d:b1:7b:59:e9:44:
e3:cf:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:07 2025 by rpki-client