Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File: mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier: PdzxUoCa67n8rMRVHINoeR0qQO1MLMp5rEM6dGy076E=
Subject key identifier: 3C:86:E0:E8:AB:12:7D:2B:73:C6:21:28:C6:9E:ED:CA:87:39:71:67
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer: /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial: 0197BAEBD537C99BEB2DA5C868D4AF7346D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number: 03DC
Signing time: Sun 29 Jun 2025 09:01:46 +0000
Manifest this update: Sun 29 Jun 2025 09:01:46 +0000
Manifest next update: Mon 30 Jun 2025 09:01:46 +0000
Files and hashes: 1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: dlmK4ySpCPqO2EbSkSeuQsb3O7fh/CqJ2++U/ljD7wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:d5:37:c9:9b:eb:2d:a5:c8:68:d4:af:73:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Validity
Not Before: Jun 29 09:01:46 2025 GMT
Not After : Jun 30 09:01:46 2025 GMT
Subject: CN=3c86e0e8ab127d2b73c62128c69eedca87397167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:a6:77:3c:ea:30:0a:99:ed:17:d8:31:59:
13:6e:25:69:85:98:e9:29:ed:91:52:3d:0d:07:67:
70:53:fb:5b:2a:8f:2d:b5:fa:a7:94:c2:12:d8:e4:
70:3e:92:89:d7:38:1a:59:7d:a8:57:f6:40:87:58:
b7:8e:4b:fc:4f:0d:2b:c9:65:df:c4:5a:cb:7c:15:
c1:6c:3f:96:9b:63:35:ff:4d:10:b7:82:01:59:68:
9d:71:82:7b:e7:c4:a7:7a:4e:ed:0d:b7:6d:27:39:
21:77:3c:69:aa:49:fe:4a:fb:93:0c:74:63:62:78:
4d:87:6b:2c:5b:ba:11:f9:eb:46:67:02:f3:89:68:
d8:38:84:fa:fb:49:5f:64:1b:89:de:da:bd:b9:fc:
08:a9:d9:9f:cf:2e:ef:87:96:c5:c3:df:39:f3:a2:
bf:a1:44:81:05:7a:1e:3e:f2:4f:15:65:70:20:d8:
bb:b3:73:99:55:7c:e6:7e:43:a8:88:f0:5a:3f:5b:
8e:00:a4:5c:5a:8a:f6:8b:b2:56:13:e9:8e:0d:8c:
f6:b8:3b:05:3b:fc:e5:19:22:d2:b4:58:89:e1:0f:
f4:8b:3b:5f:93:c7:bd:fd:17:7c:0a:33:c6:c4:eb:
e0:bf:16:37:6a:6d:3f:5a:2a:4f:e0:a7:d5:e9:23:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:E0:E8:AB:12:7D:2B:73:C6:21:28:C6:9E:ED:CA:87:39:71:67
X509v3 Authority Key Identifier:
keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:98:ce:57:25:1b:65:e0:dc:96:e8:1c:55:6c:53:de:74:55:
1c:03:7b:4e:4a:1e:91:1a:35:87:3f:b2:89:08:fa:24:70:f8:
e9:cd:de:5d:8f:9e:76:5c:b9:3c:eb:e6:46:4e:b4:14:41:eb:
85:e6:8c:d5:41:c7:57:1c:4c:42:44:01:37:27:43:1b:06:bf:
23:b8:52:52:ef:ad:de:b6:6f:7e:eb:80:3f:ec:23:c7:06:77:
ab:c2:c9:8e:d1:b7:2e:e1:c3:f2:d1:35:92:48:e7:be:ef:05:
04:6f:0c:3a:5b:3b:f7:5a:ac:6e:c8:c7:bb:33:7e:e3:cb:0d:
2b:15:d7:ae:93:9b:6c:47:da:30:b0:b4:ac:e1:42:c0:8b:da:
f7:54:92:18:f1:64:ae:a8:3a:11:96:49:5f:97:68:6d:c5:a4:
9c:40:df:57:be:fc:3d:c2:20:12:6c:47:ef:90:f0:bb:6e:ba:
cf:fd:a1:d0:ae:f8:e1:3b:40:ee:1b:ac:f8:33:01:42:b0:01:
a9:1f:e6:e3:d3:95:7c:a6:48:89:79:04:cc:4a:b7:56:cf:c0:
b2:e1:71:c2:c1:94:34:47:34:b3:f3:0f:3a:1a:a1:72:fd:bd:
97:55:88:7e:2b:ba:93:fa:da:ee:b7:dc:4d:3f:bf:6f:ff:13:
67:58:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:36 2025 by rpki-client