Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
File: RKMb41sydPLLhX5a81aLaFqJEn0.mft (raw, json)
Hash identifier: PdVC4ssxtm6mrAz8rYnXX2hsTJ3D64RBE+dIG0zNv8M=
Subject key identifier: F1:46:E1:9D:35:13:75:00:A7:07:20:89:B0:22:18:D7:F7:0B:65:A3
Authority key identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
Certificate issuer: /CN=44a31be35b3274f2cb857e5af3568b685a89127d
Certificate serial: 0197BA0F365D3B6D3C5B66EEA2D1C2FCFE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
Manifest number: 6B
Signing time: Sun 29 Jun 2025 05:00:48 +0000
Manifest this update: Sun 29 Jun 2025 05:00:48 +0000
Manifest next update: Mon 30 Jun 2025 05:00:48 +0000
Files and hashes: 1: RKMb41sydPLLhX5a81aLaFqJEn0.crl (hash: NYFTItoX6f9o/hs84tbvIA5fisln32AtX+K0RcoWRiQ=)
2: YFJicIZOsKffrZlgqGfXDM6-Vko.roa (hash: clBAf9+wIJJTmEssFM2b37Ghk44VkYVJfz08MTSBlTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:36:5d:3b:6d:3c:5b:66:ee:a2:d1:c2:fc:fe:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a31be35b3274f2cb857e5af3568b685a89127d
Validity
Not Before: Jun 29 05:00:48 2025 GMT
Not After : Jun 30 05:00:48 2025 GMT
Subject: CN=f146e19d35137500a7072089b02218d7f70b65a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:1a:df:4d:1c:81:e0:4f:90:f9:40:ad:b3:
92:b3:19:2d:2d:01:e5:51:2d:ff:7f:a7:1d:c1:e6:
c8:a0:33:d0:6f:89:62:f1:4a:c3:ee:d7:ad:e8:e3:
61:a9:9a:5b:3f:8b:de:3e:c0:1c:d8:21:ef:4f:2b:
01:c8:38:7e:f5:a9:fd:a4:9f:17:1b:31:ec:68:61:
e1:e8:5b:45:a6:50:42:99:05:9e:ab:f5:31:43:4a:
18:ec:aa:aa:06:74:29:0b:9a:e8:cb:c5:b3:33:c2:
bf:85:54:00:62:c7:38:52:ec:d8:f4:9f:6c:f2:c5:
a3:b4:21:51:72:88:36:87:04:d4:e9:be:2a:07:ea:
d8:75:19:63:b9:7f:6a:0c:ea:29:f0:7a:f1:30:fd:
32:e0:d1:13:93:32:4d:fb:2b:c9:07:35:04:6c:e1:
62:77:ba:fc:fc:e4:d1:ba:3a:e1:9f:e5:2e:cf:be:
2a:4f:55:a9:b9:ed:b7:d5:c8:e9:dc:22:29:ce:45:
d3:14:2b:10:2d:a9:f8:03:76:5e:49:51:5e:0b:3a:
65:59:ea:48:95:49:2f:ef:92:da:c4:a2:8d:25:3d:
08:3f:5c:ee:cc:91:72:ad:69:e1:45:ca:22:58:79:
f4:86:19:9f:01:83:26:25:19:5f:c7:b9:fb:d1:a1:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:E1:9D:35:13:75:00:A7:07:20:89:B0:22:18:D7:F7:0B:65:A3
X509v3 Authority Key Identifier:
keyid:44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5d:be:0b:28:30:82:42:06:40:fc:f2:6b:90:49:a0:5c:4e:
5f:9e:66:ca:8c:5d:5c:92:f9:2a:80:6a:e9:5d:da:c6:b7:f9:
a5:e8:7d:f7:17:78:cf:03:bb:33:4f:43:5f:94:3b:ea:c3:b9:
4e:af:30:c4:0d:6d:13:f1:88:8b:06:e1:10:f1:e6:e5:46:95:
49:c2:ce:92:55:f5:ae:65:87:b7:54:cc:54:81:9b:7f:1d:af:
b1:98:50:84:47:a3:bf:4c:11:e4:2c:ff:19:de:50:24:ca:70:
3e:ad:25:6c:d9:87:92:d5:8a:50:39:1c:e6:39:e3:64:a8:46:
34:5b:69:54:6c:31:08:5e:d3:e4:92:ef:7e:53:5e:5b:f1:a3:
6b:d5:40:5a:e5:3c:b9:33:f6:31:e9:07:d3:23:63:b4:1c:d5:
67:0a:9d:a2:18:58:42:81:72:f6:bd:ba:7c:cb:3e:0d:69:bc:
55:f4:2a:0d:27:aa:10:c0:cf:1f:c6:4c:e9:d8:7b:15:87:83:
35:14:1d:9a:ed:fd:bb:8f:cc:32:77:0b:75:d0:f2:11:d1:d2:
09:fa:a0:75:57:a1:9b:a9:33:dc:f2:bd:65:b0:39:a8:fe:1c:
7e:5a:da:95:02:67:b9:97:9f:f9:7d:0f:d7:2b:bf:41:98:23:
28:0c:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:09 2025 by rpki-client