Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: 5PWUPXkMK+0zVRAkJuR6SXqHgACOPYJgVpKhYxFneOY=
Subject key identifier: 7D:0E:60:26:B7:F8:69:65:43:1A:98:59:6D:0F:5F:85:D5:64:E7:D5
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0197B7B380726EB1C7F9C6FA1F82FDC41DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0D75
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: NMFS/T/zAQ/VQlVsjXoHwuDfvOKKfg9gq5pLSHdOStM=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:80:72:6e:b1:c7:f9:c6:fa:1f:82:fd:c4:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=7d0e6026b7f86965431a98596d0f5f85d564e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:6b:0c:fc:d0:77:40:eb:c9:69:2e:dc:45:
84:84:e9:d1:e9:9a:2e:fc:b6:b6:b1:b7:b0:c0:6a:
58:b7:92:93:79:df:54:36:0e:f1:cb:c7:9b:93:de:
95:d2:0f:32:42:9f:66:6b:17:dd:4d:8a:52:b3:a3:
ee:b4:8f:76:41:18:21:5a:65:aa:83:91:e6:df:43:
fa:88:bb:e1:2a:d8:b7:1b:fe:15:7b:9d:fa:58:ea:
ef:2b:99:11:6c:19:2c:f6:4a:7a:71:bc:10:49:b2:
e1:fb:df:bd:87:68:a6:80:ec:6e:d6:cf:a9:b6:12:
c4:df:9c:8c:3d:61:56:0b:2c:e9:fa:e4:4c:c1:f7:
ec:64:69:db:1b:72:a6:60:aa:09:a2:75:6e:da:26:
c7:68:62:71:dd:99:49:d7:ba:e8:44:5a:a4:25:3f:
e8:ae:35:38:d2:4d:17:8f:a1:8b:0e:93:25:a6:43:
3f:01:f3:29:fb:ce:c0:da:ed:0b:5a:71:c2:9b:72:
7e:61:48:63:63:81:80:c5:9f:d3:9d:8d:66:00:40:
80:05:26:e0:8f:c5:7f:c7:33:36:58:90:88:be:9e:
45:0f:99:0c:e1:b9:f3:23:4c:29:40:3c:1e:15:ac:
90:e9:4b:a4:fc:d4:1c:41:93:d6:37:45:b2:32:29:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0E:60:26:B7:F8:69:65:43:1A:98:59:6D:0F:5F:85:D5:64:E7:D5
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:f3:c3:c1:76:b9:bd:4e:78:7a:2f:05:4c:41:60:63:62:
0e:66:2b:98:48:bd:b0:71:01:98:c3:f1:36:e8:71:b8:3d:43:
fb:65:73:ab:62:d2:37:32:16:ce:d3:c7:ba:ae:23:a1:9d:42:
b5:f3:1f:ff:f0:02:a4:f3:a9:02:17:45:0c:75:b1:f9:a7:29:
11:96:18:27:d7:71:2f:38:ad:2e:82:31:3c:09:6f:2e:5f:88:
53:58:ec:51:12:1b:84:86:d3:26:79:93:93:ee:10:de:db:7a:
a4:b6:63:09:86:81:19:fb:91:b4:18:f4:34:bd:ee:d9:04:31:
ad:83:d3:07:89:a2:3f:f1:3e:f1:33:dd:4d:fe:aa:4f:8e:fe:
63:f7:2c:d6:a4:72:6b:57:71:2f:c7:a4:25:50:ce:5f:82:a0:
4a:2c:a3:43:48:24:5b:83:8c:75:9b:d8:c6:9c:46:fe:11:ac:
59:06:a9:af:df:3c:10:95:e7:17:a6:9a:2e:ee:1e:19:81:38:
a9:e0:de:3d:ba:c0:db:23:1b:60:90:d7:20:18:4d:e6:1a:67:
b0:af:24:40:9a:1e:a8:46:f4:a4:82:d0:a5:c9:a2:e1:9d:7b:
d1:e1:e3:8f:8b:9b:6a:82:82:3d:86:fd:de:4f:e3:ed:1b:e0:
b3:54:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:42 2025 by rpki-client