Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: qe9P6uOk/WnuKoYBs8PWb8zA47Li2GYdtbPEFjiMCNw=
Subject key identifier: B2:5B:CA:81:BC:64:11:C5:C1:F5:02:F2:99:62:0E:6C:91:0A:50:8A
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 0197C0ED8647A425357F1A7ED0FFCC51E814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0DB9
Signing time: Mon 30 Jun 2025 13:01:21 +0000
Manifest this update: Mon 30 Jun 2025 13:01:21 +0000
Manifest next update: Tue 01 Jul 2025 13:01:21 +0000
Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: VJPW25bq2vzdNsdbJ7Wu9D2+70q91iqz6WAo15JFhE0=)
2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:86:47:a4:25:35:7f:1a:7e:d0:ff:cc:51:e8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Jun 30 13:01:21 2025 GMT
Not After : Jul 1 13:01:21 2025 GMT
Subject: CN=b25bca81bc6411c5c1f502f299620e6c910a508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:ca:b9:26:6a:d5:7f:a3:8b:53:e3:6f:a8:
8a:d4:46:38:ec:40:5a:35:6b:ce:6e:5b:07:19:bb:
28:66:92:9c:b9:bd:d4:12:23:e2:c8:0f:fc:fe:ce:
49:c5:75:4c:31:be:c4:18:64:94:ef:fc:ac:e7:77:
70:93:f5:b8:59:09:d0:ef:7c:e6:ac:f3:dc:91:c1:
64:4a:17:17:7d:d3:ab:6f:fe:30:12:4e:32:b5:ca:
d4:ce:1f:bf:3d:8a:d9:0e:c5:51:6d:5c:c0:87:b5:
b2:a6:4c:84:8e:74:ea:ae:e7:d1:60:06:77:a7:02:
fb:c1:de:1a:cc:ce:ac:f1:c9:ef:4d:63:76:e2:6a:
6a:0b:3b:62:f4:b0:43:7e:ab:c3:cf:31:fe:1a:a2:
60:72:9e:c9:73:88:e9:c9:51:2c:95:80:18:74:e9:
77:85:74:67:bc:1c:d7:37:99:90:cd:22:66:67:9e:
5b:fe:b4:72:40:12:0e:a3:10:bf:ef:ba:0e:fe:d0:
14:0f:7d:9f:71:28:dc:5b:a5:d3:41:14:8e:89:16:
2e:59:ca:44:bb:4e:90:a6:05:11:f2:b9:39:c0:3b:
7f:a2:3a:a5:51:3f:46:cb:a8:f9:f3:56:83:b4:5f:
ce:93:bf:11:28:95:f8:c0:d9:36:43:93:5b:80:c2:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:CA:81:BC:64:11:C5:C1:F5:02:F2:99:62:0E:6C:91:0A:50:8A
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6b:bb:ab:a2:a9:b5:24:47:d4:11:31:6d:9e:77:a9:e9:ad:
67:51:1d:c9:6e:96:5e:37:c3:43:92:b1:8b:9c:b4:a9:ed:c7:
c5:e5:82:83:52:e9:9f:3e:25:df:39:0f:f7:c8:fd:8e:bf:d5:
e1:c9:14:3f:27:59:57:de:a2:4b:83:3f:30:ef:fe:ab:bd:bc:
96:96:75:d2:22:5f:ca:5f:ca:41:a3:45:7d:59:bb:a0:03:3c:
7c:16:8d:b6:6e:ef:d6:aa:22:5c:41:59:bd:4b:49:02:ff:ae:
9f:a6:bc:44:9e:3e:ea:f5:0a:9c:90:7b:70:9b:b3:71:d5:7d:
9e:9a:4a:4d:7d:fb:ba:5b:9b:4a:6c:ca:53:95:54:9a:20:09:
ea:06:73:b5:59:68:ed:a8:cb:c9:b7:3e:5b:77:11:6d:38:b5:
2a:6f:2b:2e:e2:43:0d:80:cc:c1:f1:77:95:29:75:88:d8:e3:
b2:34:77:71:6b:52:60:b5:0c:a2:3d:df:32:4e:d1:ca:90:21:
e9:30:3a:72:85:a7:f5:3b:58:41:9a:7b:ba:66:57:30:ec:70:
e3:35:46:d4:2d:2b:3e:6c:17:56:33:fb:9c:e5:db:17:49:48:
3a:a0:68:8b:7e:1c:cf:6f:49:4e:7d:d6:8d:7f:42:94:38:58:
91:2b:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:15 2025 by rpki-client