Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: ElddO5XdK4Fkfls2gr7tXT3a/TQPH6VLO5Jv8rENzfM=
Subject key identifier: CE:5B:13:11:A2:8B:94:1A:D7:6B:63:D3:1D:8E:F9:95:FA:50:D7:64
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 0197B821278AEC0F2E36ED628B14FA712239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: mWkMg3DOjN9neaJrRUqElza1QKFwfr/c4ZmVLJxynd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:27:8a:ec:0f:2e:36:ed:62:8b:14:fa:71:22:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=ce5b1311a28b941ad76b63d31d8ef995fa50d764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:44:68:db:f5:62:ce:5e:f3:ea:d5:b5:42:
f1:72:90:af:60:f2:d6:1d:f3:e1:7f:94:5d:84:d8:
11:99:a0:70:b5:2f:f1:86:be:bb:d3:55:54:58:08:
77:55:25:c5:b2:6f:88:74:ee:c2:9c:fc:ae:f0:f7:
ea:ef:d3:3e:2f:8c:fd:db:7f:5b:42:8d:98:ef:54:
ba:3d:81:b5:d3:e0:40:35:7a:58:2e:88:d3:18:35:
02:5f:62:23:80:69:1d:f0:bf:ba:8a:2c:59:cd:41:
2c:3f:4e:e2:eb:f4:26:29:36:61:40:91:e7:06:a6:
15:3a:58:5b:44:a4:cf:55:88:6a:c0:bb:a6:93:93:
f5:eb:98:65:36:09:20:dd:ff:89:c7:ad:06:ec:7d:
a5:32:1d:ea:df:82:c3:63:2d:82:1a:29:4f:e6:f6:
73:5a:22:c1:69:fc:5c:76:26:66:e7:37:45:7d:3b:
14:31:d0:9e:1c:1f:f5:0a:56:4b:67:ed:4c:86:8c:
07:fc:a7:2b:f4:da:98:5a:8c:32:4d:71:e3:af:77:
9f:ef:9b:a3:a6:04:4f:9c:04:be:ae:48:94:90:e7:
d5:d3:37:84:c9:e5:aa:37:65:d6:52:59:47:3e:17:
aa:c6:8a:64:68:80:c0:3b:af:46:2b:83:79:23:9e:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:13:11:A2:8B:94:1A:D7:6B:63:D3:1D:8E:F9:95:FA:50:D7:64
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:4f:c5:c9:95:55:31:09:cb:2f:a5:a2:5f:59:dc:47:d6:
1a:d8:27:20:3e:55:ff:ca:c1:01:98:33:0e:1e:a2:84:e4:e0:
18:4a:86:fd:b6:b9:ac:84:8e:ab:44:21:c5:19:04:4f:87:df:
90:a3:33:22:6a:bd:90:c9:e6:24:2b:9a:98:66:75:c0:40:64:
63:91:88:79:ee:72:fa:a6:f7:ef:7e:06:8f:95:a6:d1:0f:73:
7b:d3:fe:f0:70:58:e2:3c:82:d1:e4:56:04:b5:90:22:e9:67:
30:eb:65:55:dd:c5:fd:d4:8e:03:fa:bc:d3:78:c4:f3:3f:98:
92:81:da:bc:39:d0:f9:e4:1b:36:db:99:cb:48:9c:87:aa:b3:
10:2a:27:ef:26:37:f2:40:7f:4d:32:ba:34:03:bd:95:6e:fe:
86:a7:c5:7c:65:3d:d3:28:72:73:30:2c:52:78:26:46:3e:fc:
b8:ec:d1:10:f9:e5:df:f8:eb:b8:5b:a9:a9:64:e9:a4:e7:79:
88:2f:3e:75:6d:56:6b:d6:bf:e2:f1:7d:dd:2e:f0:8d:58:e8:
16:1f:53:f7:c2:02:5e:e5:07:ae:76:23:0f:b2:0d:85:ce:d7:
96:f9:03:aa:6c:23:4f:5a:a5:6d:39:75:2a:17:4f:c4:3f:3f:
e3:ca:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:41 2025 by rpki-client