Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: FBe1TY6/0tUIHzgT5gxssGeZ/yb+h63+HGNLAAliyOE=
Subject key identifier: 3D:B1:55:14:65:2E:C2:76:82:C8:C7:A9:04:A0:1C:C0:C6:BE:AB:E2
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 0197CB70B90203889502495B5111D7822AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1061
Signing time: Wed 02 Jul 2025 14:00:51 +0000
Manifest this update: Wed 02 Jul 2025 14:00:51 +0000
Manifest next update: Thu 03 Jul 2025 14:00:51 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: K8EKGjCBV5uB2UVXk509Y2SsiUX0EfYiYQ0Tw+F1FRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:b9:02:03:88:95:02:49:5b:51:11:d7:82:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jul 2 14:00:51 2025 GMT
Not After : Jul 3 14:00:51 2025 GMT
Subject: CN=3db15514652ec27682c8c7a904a01cc0c6beabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:0e:81:96:fc:b2:0d:4b:a0:af:84:0e:ce:
a5:9a:50:ef:e0:7e:53:46:ed:68:0b:76:3d:2f:34:
38:6c:32:cc:06:52:1d:c8:52:d6:5d:3d:4e:68:f8:
62:3f:10:88:55:0a:60:d0:b8:2b:24:52:74:91:ee:
ff:85:8e:d8:7c:cd:79:a4:db:05:69:d1:27:9d:e9:
79:a3:09:46:3b:3e:65:9d:34:6c:0c:5f:32:a0:2f:
1b:18:eb:62:00:7d:10:5f:1f:85:38:13:c1:e4:08:
39:4a:10:1f:49:2b:3b:ab:18:ed:34:ca:a5:84:04:
77:77:68:e7:82:2f:f0:9c:1c:eb:3e:0b:13:68:65:
b6:9a:05:a9:b3:8e:41:13:ed:27:b2:42:a6:ae:f5:
c9:24:68:49:92:dc:b4:a9:af:13:5c:5a:85:51:6e:
b8:e1:30:10:1c:71:99:1d:ba:33:c2:d1:fa:44:de:
2b:fc:31:1c:1e:e7:13:4e:c3:ff:b3:78:55:05:ea:
fc:b7:7d:ae:d7:d0:09:07:b6:bd:06:f0:fd:54:29:
75:d5:2d:d0:e7:7a:84:78:78:05:cc:37:93:5a:4a:
e8:6a:27:92:cb:0d:ea:9c:42:ac:22:ff:68:77:fa:
4d:13:2d:94:84:9e:b8:ce:5b:0c:39:4f:cd:6d:65:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:55:14:65:2E:C2:76:82:C8:C7:A9:04:A0:1C:C0:C6:BE:AB:E2
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e6:b3:f0:c6:ec:2b:02:5e:d8:12:71:df:d2:71:cd:3e:c8:
dc:2c:b4:8d:f8:2f:ec:5b:46:9d:b5:7a:f6:90:cd:aa:7f:0f:
13:b4:ac:a6:bf:2d:a1:13:36:83:70:94:3b:e1:b8:7c:b9:58:
85:9b:98:3b:e8:77:dd:7c:2e:02:cf:5a:92:2d:19:05:e2:e2:
57:40:0b:74:84:00:e3:29:3f:ff:be:cb:d9:34:d8:27:93:67:
8f:b5:e1:f1:46:ec:8d:c7:5c:1f:4b:88:58:e1:e0:ef:14:6f:
f9:49:84:87:2a:19:74:2e:6a:60:11:e4:fd:e6:58:56:20:37:
09:f8:46:88:bc:aa:36:b0:6c:ae:5f:4a:05:2d:0e:97:cc:d6:
1b:ce:40:f2:2a:ee:63:f1:a8:ba:68:b0:8f:c1:f5:d6:1e:2c:
dd:e4:c3:b6:77:a4:8a:36:ca:20:28:9f:62:61:9d:4e:e0:d8:
bc:79:73:2a:9b:d2:ae:ef:f7:31:64:7e:4e:46:35:77:ca:8f:
4b:b4:ae:96:b0:87:fc:49:ca:d9:58:25:43:cb:88:e6:fb:6c:
14:95:bc:b6:50:72:78:e3:b2:39:de:71:5d:b6:b9:ab:2c:f7:
4e:b9:9a:f7:9b:f8:3f:2a:8c:fe:47:fa:a7:ac:f0:01:56:55:
b6:a0:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:44:24 2025 by rpki-client