Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: GzCwiITMzQneo0tBoqQKKmftLEwS6Knv0VuLvwQPrcU=
Subject key identifier: CA:B3:76:72:E0:90:7E:39:8A:D2:A7:F2:0C:DB:C8:B8:D1:1A:00:70
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0197B7B2F782851F69B45333E2CE3BEE4259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: tR20NZdKb9mS//7qztrPGPxUE/d4DViJyaHMbSO4Mqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f7:82:85:1f:69:b4:53:33:e2:ce:3b:ee:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=cab37672e0907e398ad2a7f20cdbc8b8d11a0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:1e:b9:2b:a8:28:57:37:0c:ee:ac:9d:68:
62:a7:0a:69:3c:b7:0a:94:45:6f:26:09:dd:6f:32:
27:aa:db:8a:a0:6a:f8:98:ab:a7:9f:92:3f:b2:fd:
52:6a:11:b5:87:db:a6:33:f6:f2:0f:8d:94:37:c9:
52:04:55:65:06:8d:a6:30:85:31:e8:ff:ad:cf:34:
fd:c3:14:f8:c4:bf:6b:de:8e:0c:a7:e1:9b:b8:6f:
a3:df:be:a3:1e:ab:79:68:1c:ac:9f:76:60:82:8a:
01:cb:9c:66:22:66:ca:12:17:17:23:27:22:f0:d2:
de:96:a3:0c:87:6e:e7:c9:7c:c4:91:3f:64:20:1e:
af:2c:a9:4b:6f:e4:86:61:1e:88:30:73:6b:88:68:
19:4e:81:07:c5:d2:85:54:51:f5:90:2d:47:9d:7c:
3c:a9:fe:34:96:47:c3:fb:5d:b4:f2:00:15:bc:66:
5d:4e:d7:7b:62:d4:59:42:35:59:b9:2a:a8:05:84:
4d:01:b8:4f:60:c2:56:ff:7c:ea:ba:d8:2a:12:0b:
e4:13:92:4f:65:4c:d9:76:c4:a1:a5:65:28:8f:a9:
4e:89:3e:b2:c0:12:9d:57:ce:8f:73:ff:34:9e:6e:
95:3d:15:78:45:9f:22:e1:4c:38:16:9a:ef:95:e3:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:76:72:E0:90:7E:39:8A:D2:A7:F2:0C:DB:C8:B8:D1:1A:00:70
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:00:f7:6e:7b:5b:ab:dd:48:dc:86:23:19:9b:85:6a:e7:
bf:de:e7:dc:23:31:80:c9:88:86:57:9d:92:d6:93:7e:1b:60:
3c:4b:34:f7:33:a8:8c:37:38:fa:f6:5d:44:00:73:f2:e7:03:
10:8a:6c:6e:2c:e2:7a:69:a1:a9:a3:a2:64:72:e5:8a:0a:e1:
fd:2b:43:66:96:a5:ad:30:8b:74:ae:84:ce:4d:09:0b:3f:42:
e9:ac:59:2a:02:2d:ce:8a:79:82:80:03:bd:e3:01:17:15:e5:
44:db:f6:f9:d6:5e:87:5d:6f:a0:d0:db:5b:e2:a5:e7:77:42:
42:bd:bf:84:c9:a2:fa:6c:e9:f2:cd:9b:b1:36:72:b6:57:74:
aa:c2:c7:da:ed:54:f1:7d:68:c8:99:3e:3f:e5:29:be:eb:7a:
d0:e7:9d:e8:aa:72:7d:78:8e:63:5a:f5:7f:d3:95:58:2b:43:
aa:6a:df:f2:f5:f8:b2:35:24:12:6f:be:3d:68:e0:96:aa:da:
05:f0:46:4d:8d:d5:90:46:26:ac:e2:4c:f9:0b:91:08:74:e4:
57:83:2f:50:f1:b2:ab:bb:a2:aa:f3:e6:01:3c:de:be:05:10:
33:8b:6b:93:c5:46:aa:d9:5a:e9:93:fe:85:9f:04:b1:5f:d6:
1f:f2:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:08 2025 by rpki-client