Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: BA0SSukcqvpaRWU0V3H4O0Dd6BlRVPuOtWL0lkJq3Ms=
Subject key identifier: 1D:6E:97:8F:D7:61:94:DD:02:FB:91:2C:41:B7:88:E7:C6:C1:30:59
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 0197CA954F325B2CFE93DBBCDDDC1236D316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 04D0
Signing time: Wed 02 Jul 2025 10:01:12 +0000
Manifest this update: Wed 02 Jul 2025 10:01:12 +0000
Manifest next update: Thu 03 Jul 2025 10:01:12 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: 2mgm/EfP3VH7e0GjerxcgLXv5R73u2GkhwpRVz0iNzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:4f:32:5b:2c:fe:93:db:bc:dd:dc:12:36:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jul 2 10:01:12 2025 GMT
Not After : Jul 3 10:01:12 2025 GMT
Subject: CN=1d6e978fd76194dd02fb912c41b788e7c6c13059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:ce:49:ec:16:95:4b:82:fd:c1:6b:1e:cc:
f9:cd:b2:4f:e9:4b:3e:93:87:2a:24:9e:cb:9b:24:
cf:31:eb:e1:39:8d:d3:e7:c3:8f:f1:22:7a:ce:b3:
5b:99:27:3d:ea:3a:45:44:79:1f:4b:46:cf:26:11:
56:4f:08:99:93:d9:bd:19:02:21:0f:d3:e3:f9:0a:
09:0a:d8:a1:16:fc:0c:fe:6f:f3:cf:06:53:35:e5:
bd:17:4f:3a:e6:9b:e5:de:eb:7a:dc:be:4f:76:bc:
c4:2b:1d:d2:41:0e:2e:1b:49:1f:1b:1b:2e:93:24:
fe:1c:53:52:88:e0:41:82:ff:37:c0:f9:5c:a2:8f:
96:9e:88:ec:a7:fc:f1:40:14:a5:ab:75:3f:8a:db:
9d:c5:fb:b1:cc:50:ce:ea:3a:93:ca:b8:a6:6e:14:
1f:bc:9f:6d:cb:10:4f:40:82:3e:44:df:ef:7a:c7:
d7:b5:99:79:4f:df:40:e2:9f:3a:bc:ae:a0:c4:21:
90:b7:24:d0:c3:bf:7f:22:b7:e7:12:d1:17:f1:04:
71:8c:00:a4:03:19:8c:91:b4:ea:f5:b4:6f:18:eb:
1a:90:a2:00:c6:0b:92:3a:88:05:4e:8c:1f:b6:2e:
b7:fe:88:64:59:a3:fb:ce:96:25:61:79:00:25:0e:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:97:8F:D7:61:94:DD:02:FB:91:2C:41:B7:88:E7:C6:C1:30:59
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:f1:b8:f1:78:7e:3e:d2:83:63:0d:76:57:7b:e2:61:42:
3b:c9:65:85:af:c8:fe:79:e2:fe:9f:39:3f:18:c3:cf:bd:e9:
e2:6e:2a:ac:17:40:0f:fa:e6:2a:fd:d6:86:aa:b1:4e:2a:5e:
b2:44:5f:4e:b9:81:1a:84:93:b3:84:07:b2:e9:e8:bb:00:82:
80:9c:a7:9a:c5:5f:b6:96:a4:62:0d:e0:04:8d:f7:9c:70:a8:
0c:da:ba:6a:35:55:aa:32:ba:b3:4a:2b:2f:12:97:6e:8f:69:
f7:97:48:fe:43:8d:e4:1f:66:f5:3f:3a:15:8f:1e:63:4d:f3:
24:7d:72:05:9a:ed:ad:12:e1:21:69:08:e8:14:a5:fa:06:92:
af:fa:e3:2a:c9:c9:d8:13:c3:ce:c2:fb:b4:78:8b:4a:b6:27:
86:88:fb:8a:fd:9a:72:16:62:ef:af:04:c4:5e:74:92:24:5d:
30:3d:fb:83:50:57:d6:13:89:03:01:f9:57:8d:15:01:f4:cc:
ff:03:b9:ce:5d:4f:92:b0:f7:e2:25:b4:98:ff:51:46:7b:47:
38:25:80:b1:8f:54:34:9e:fd:b3:43:cb:4d:95:f4:60:d3:7a:
b1:93:9d:9e:ee:0d:81:5b:43:e6:03:f0:31:f9:c2:89:55:43:
1a:5c:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:24:00 2025 by rpki-client