Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: gV9eSOFJu1JHud6SgDdZzjSRVqIGpuXr/DV7HHuRq/M=
Subject key identifier: 0F:4A:79:7C:83:E7:67:BE:80:F2:4F:5E:C6:A5:97:FB:58:D9:94:57
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 0197CE3ACB9A0356126778AB05BB67A306C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 03:00:49 +0000
Manifest this update: Thu 03 Jul 2025 03:00:49 +0000
Manifest next update: Fri 04 Jul 2025 03:00:49 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: iCnWNMGuC9rSCxlSonFF0SvSiG50H1qvh0o+1Ba0Zrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:cb:9a:03:56:12:67:78:ab:05:bb:67:a3:06:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jul 3 03:00:49 2025 GMT
Not After : Jul 4 03:00:49 2025 GMT
Subject: CN=0f4a797c83e767be80f24f5ec6a597fb58d99457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:d5:07:b5:38:2e:96:00:b4:25:df:a8:83:
bf:cb:84:b8:c4:ed:2a:f8:05:e1:73:7d:90:1f:02:
18:fd:ea:57:1f:43:eb:b6:1d:c5:01:aa:02:65:89:
8c:ac:d4:76:f4:bb:44:d3:f2:e3:4e:ca:10:fa:0b:
04:f6:73:8f:55:f4:d9:42:de:26:b1:59:ad:fb:69:
29:96:c1:57:a0:f3:cd:8e:9a:a9:dc:84:89:e7:57:
b3:ba:6c:24:2e:f3:fe:5a:b5:d4:36:0b:a8:52:ad:
05:66:3d:1a:b1:13:eb:a0:1f:15:21:a4:e9:73:3c:
0e:c7:2e:30:0f:ff:85:d2:6d:73:43:f5:f0:f1:26:
51:62:d1:9f:a1:6d:3a:e0:20:19:8e:ef:39:30:d3:
89:e3:e8:b9:71:1f:e3:8e:43:79:70:e9:a7:45:34:
98:49:f3:90:9f:7a:e9:db:74:cf:f9:f3:0b:a0:0e:
b9:c1:60:74:96:fe:cd:51:fa:2f:65:fe:b5:df:49:
53:8e:c5:14:86:dd:bd:7f:e4:c7:d0:b7:37:07:72:
a7:fe:88:5c:ee:57:db:25:41:d4:4e:a7:6e:75:91:
88:95:d3:83:76:aa:16:d2:58:a0:20:5b:1e:9c:77:
56:b3:06:c6:94:34:4e:83:7b:f0:09:a2:eb:05:7b:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:79:7C:83:E7:67:BE:80:F2:4F:5E:C6:A5:97:FB:58:D9:94:57
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:d9:17:c2:a5:81:25:bd:08:ef:21:7f:33:f9:d1:d7:7b:
67:b1:00:e4:9a:00:23:95:e0:4e:09:60:41:5f:73:be:0a:fa:
60:3b:98:1e:c3:50:90:58:9f:ec:2f:14:09:6b:a8:45:af:a6:
82:21:a9:2f:f3:2c:c4:6c:4f:27:89:7b:4f:02:2f:8a:e3:6a:
f3:ff:d6:4d:41:4b:48:2f:f0:86:8b:88:ae:66:83:f9:d2:43:
d7:a4:cf:c0:ee:d6:30:b9:0c:b7:3a:c5:99:f9:45:2b:c2:d3:
b4:2c:57:3f:29:a4:2d:1c:c0:5d:50:93:93:77:f0:02:24:91:
f2:be:82:6d:85:7b:26:ac:24:f8:a6:76:9e:0a:4b:0c:2c:33:
e4:46:3c:dd:1b:b9:71:6b:0e:e0:a9:df:6d:3b:34:ce:45:a6:
57:19:70:c0:e9:65:3f:53:a8:7b:93:a9:b2:8a:b6:c5:f5:82:
0b:40:7e:2e:37:9b:cd:65:92:50:4f:9f:bf:d8:9d:93:73:c9:
76:8e:6b:87:74:e1:bb:2b:30:f6:76:d9:b5:c4:59:7c:2f:80:
c1:96:1f:5b:ce:9f:21:1a:e4:00:ba:f0:d8:83:4e:c0:e0:98:
00:8c:54:cd:dd:54:55:4b:36:8d:4b:94:2d:b2:55:fe:2b:5d:
87:b4:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:51:45 2025 by rpki-client