Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: aJ9iJ73fBYjLfWsUvADeT+PN9ruFPtPjPiMZtwNT6TE=
Subject key identifier: 9A:6D:3F:47:FC:96:83:6A:D1:9A:3A:B3:4B:E9:2C:45:FA:36:00:14
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0197B6A1A378C8BA71F6F1CEF4630F4F6E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 1355
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: 2acPuNFXeI2/ghhiCNIZqhFWA6K4wCCOirbEPVtTM70=)
2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a3:78:c8:ba:71:f6:f1:ce:f4:63:0f:4f:6e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=9a6d3f47fc96836ad19a3ab34be92c45fa360014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:4b:c2:c5:78:28:66:78:ca:e8:46:0f:54:
b1:36:f3:38:73:bc:2b:af:0b:33:64:31:0f:2f:23:
96:8a:2a:17:85:23:fc:03:68:0c:7a:79:83:68:b1:
49:7a:de:4f:ec:18:83:c4:98:eb:2e:d7:b3:89:59:
15:88:49:02:33:a4:7d:79:b9:7b:cd:18:d5:04:cf:
88:29:8e:34:d2:e6:a2:d4:c0:5d:1e:0c:63:77:a2:
6a:06:5d:16:c9:97:43:53:43:8e:3d:a2:41:94:4c:
74:93:20:ff:56:a7:4a:82:23:e5:fc:c8:f9:ec:42:
5a:8c:9b:c4:92:ff:f4:f1:7b:84:98:fd:3e:94:1d:
b4:f0:70:e5:c8:97:74:58:3c:84:43:d1:bc:9a:9e:
e1:f3:c0:a0:ce:6b:6a:11:9f:22:ae:71:d5:63:e2:
c3:14:c9:27:dd:09:1e:e4:f1:ed:09:0d:fa:6b:99:
11:60:a8:6a:2a:c7:8b:cb:b2:40:2d:ce:70:c5:86:
0c:58:33:8d:a3:19:ee:e0:53:65:5d:f3:01:7b:e6:
32:cb:82:9a:ca:2a:b6:fb:7b:07:88:81:60:ea:7a:
de:2f:16:4a:d0:8e:a7:87:ec:1f:58:d7:e0:f3:a5:
23:e4:8b:fe:17:5d:87:d6:a7:30:a8:a6:03:dd:a7:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:3F:47:FC:96:83:6A:D1:9A:3A:B3:4B:E9:2C:45:FA:36:00:14
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:2a:fa:27:6d:25:f3:3f:02:56:53:53:7b:e9:32:dc:c7:
1b:f1:af:f7:26:3b:4f:9c:87:86:5f:a5:27:1d:df:58:92:5f:
5b:bb:c0:70:bb:0b:87:6b:38:3b:dc:64:80:c2:61:f6:2d:64:
ba:36:3d:f8:06:6c:14:eb:91:1f:97:2d:2a:68:02:53:0f:16:
8c:b3:94:21:c0:82:fa:c0:e5:46:c0:ff:45:48:31:e0:58:13:
51:94:22:68:1a:20:02:ae:82:65:32:50:f4:29:12:37:1d:50:
c0:57:33:a6:b9:6a:07:f8:e7:33:5c:d5:1f:e4:4a:4c:47:44:
96:ac:dd:58:2d:ff:e7:87:ba:64:da:1d:c0:c8:06:7e:c8:54:
f0:85:7d:15:28:2c:f6:77:23:b9:6d:65:49:8b:9d:0f:a3:02:
8c:36:b3:67:20:e4:0e:58:86:eb:51:e6:bb:cf:c7:3e:68:0a:
74:81:ba:06:da:8d:93:83:2e:c5:a5:7a:f6:c2:61:be:26:9c:
03:5b:f1:d0:34:a3:60:58:6c:89:6d:22:4b:52:a7:de:09:44:
87:f1:4e:7f:85:d4:6b:02:1e:87:18:43:64:49:7a:36:57:e6:
1a:fe:33:0e:d6:b0:10:09:00:3a:c4:a2:13:1e:57:52:78:95:
b2:cf:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:03 2025 by rpki-client