Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: gV+rul9n8J6/YqMQDO/BNd727vZLn5sTeOX/68krxx0=
Subject key identifier: 88:A3:AA:85:B1:93:44:07:E0:13:6B:82:F0:64:4D:3F:85:32:C6:A8
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 0197B70F1C60D07CEB2138066DBC96F71583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: L2Xis4ihJujqPzkX5YH4+8Y7C9LHJPJtls/DQniBhSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1c:60:d0:7c:eb:21:38:06:6d:bc:96:f7:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=88a3aa85b1934407e0136b82f0644d3f8532c6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:c7:a3:4c:a8:8c:f7:ed:2c:a8:e2:2e:fa:
1e:c5:1a:2a:4e:83:19:95:67:89:97:5e:c1:5d:4f:
77:86:30:bb:fb:0d:54:42:8f:e3:ed:3d:9f:97:9b:
a7:71:89:c1:d1:86:7f:3d:20:f8:81:8c:62:71:e8:
8f:fa:13:e3:d4:7f:23:0f:2b:50:bf:36:d9:0f:01:
07:4b:cd:6a:9b:79:70:f3:ed:f3:26:a8:45:64:df:
e4:56:36:06:20:61:34:d9:20:ee:4c:4d:24:17:ee:
9f:c5:c1:d7:d6:6f:ae:e2:54:ad:65:78:ff:83:a8:
8f:38:20:ac:c5:5f:83:b3:61:09:17:61:7d:75:2e:
26:a0:56:c9:a2:e5:49:a0:2a:5d:92:56:4f:6e:93:
73:df:56:02:d6:1a:b9:c7:22:7c:da:7e:fd:d2:82:
5c:66:95:82:6e:22:c2:94:0b:e8:6f:83:65:40:4c:
ad:59:2b:02:ee:6c:5f:29:03:31:83:1c:d3:9a:b9:
24:27:74:f8:db:2f:a7:fa:25:dc:75:c1:98:c7:17:
0a:83:8b:5d:e3:36:8b:b2:de:22:9e:b0:63:06:ee:
dd:e3:d5:97:ed:97:40:cd:e9:b8:27:87:bd:71:61:
74:4f:04:80:ec:ee:46:c8:7b:69:86:b2:2b:18:97:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:AA:85:B1:93:44:07:E0:13:6B:82:F0:64:4D:3F:85:32:C6:A8
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ea:e6:41:8e:49:d9:e7:1e:b0:52:a0:8a:8b:b7:39:5f:10:
68:d2:5c:dc:5b:e5:a4:f1:0f:21:f7:da:5d:74:b7:55:42:a4:
df:9a:a5:44:6d:86:fc:21:5f:36:52:9b:0b:60:38:de:f9:71:
e6:7d:71:b9:92:9e:f1:3b:c8:76:e6:af:d2:85:44:05:4c:71:
e8:c8:d8:6f:07:3e:dc:2b:63:57:8a:a0:dd:8e:dc:41:6c:84:
4e:00:fe:2c:8f:30:2f:86:cf:9d:cc:1d:22:cc:8e:95:95:7b:
df:01:11:24:4f:bc:67:7d:bf:35:6a:0e:5e:d7:81:4d:4c:cb:
71:10:08:69:3e:62:de:fb:0b:b4:af:1c:a5:fa:f9:01:27:79:
9d:60:e2:aa:08:3e:d9:f7:c5:9a:79:37:e2:34:88:ab:be:f6:
06:a3:d2:af:a3:3d:d3:0e:0c:76:a2:7a:8f:fb:4f:1e:db:80:
c8:25:4e:e0:62:c0:67:08:b3:12:a7:15:90:79:73:b5:80:3d:
19:76:28:9f:66:2e:ef:94:13:bc:43:29:dd:b3:53:a3:27:f4:
62:22:d4:90:94:4c:df:6d:54:c4:2e:f9:ac:2b:ba:8e:9d:9d:
8f:2e:8a:5e:50:4e:3d:0b:2c:2d:6e:83:2e:17:5f:0a:70:5c:
8c:4f:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:34 2025 by rpki-client