Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: Gtd/2Q9xVzTyXM52pQ5nMW11CbPLikq0UygLuk6iuz0=
Subject key identifier: 97:73:6D:E1:AE:3F:9C:4A:46:2D:CF:48:80:5A:2C:B8:C4:46:F8:61
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 0197B5C51553691118ACB39021593488AEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 0FFD
Signing time: Sat 28 Jun 2025 09:01:21 +0000
Manifest this update: Sat 28 Jun 2025 09:01:21 +0000
Manifest next update: Sun 29 Jun 2025 09:01:21 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: vAncxuj5xrbu7u5KjQvF5lhP3p24TfPftSTFOW3E9yU=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:15:53:69:11:18:ac:b3:90:21:59:34:88:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Jun 28 09:01:21 2025 GMT
Not After : Jun 29 09:01:21 2025 GMT
Subject: CN=97736de1ae3f9c4a462dcf48805a2cb8c446f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:4b:e0:64:58:d6:80:fa:a1:6c:7a:72:2d:
49:ff:d8:af:22:61:56:e4:b9:10:5e:f5:c1:dc:19:
06:65:2c:c9:0d:c2:b9:1e:c7:0f:4d:93:90:8d:0a:
77:d4:fa:d5:dd:76:1e:a1:4d:17:f2:05:09:c7:ee:
fc:8e:00:56:0e:70:9d:3c:02:99:b5:15:80:44:bf:
c8:9c:71:79:6e:5e:6a:5e:a8:48:35:1c:7e:46:7e:
7f:f3:d1:31:c8:54:e0:7d:24:38:79:bb:0f:62:f9:
9e:60:87:a2:8d:05:31:cb:f4:a3:0a:c8:e0:9f:09:
5b:be:ac:db:00:35:50:d5:b1:4b:92:5d:43:07:41:
e4:d1:04:ff:72:29:f4:ab:dd:35:3b:ca:d6:b5:3e:
e6:b5:c6:9b:2d:f6:04:68:23:fe:37:e6:23:70:a4:
74:46:b0:98:45:a5:60:f5:b4:40:5f:5b:32:00:20:
f0:d1:f6:9c:ce:5b:da:84:4d:b9:db:b0:3f:9b:5a:
bb:56:6e:e5:b9:6d:9a:42:eb:f0:e2:4d:79:86:e8:
e5:4d:a4:86:cb:c6:bd:a5:95:db:89:4a:fd:44:af:
cd:77:77:9b:73:12:1e:fb:25:d3:86:a8:a2:c5:fa:
2d:ee:60:32:62:26:59:a8:34:db:01:85:54:14:45:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:6D:E1:AE:3F:9C:4A:46:2D:CF:48:80:5A:2C:B8:C4:46:F8:61
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:63:96:42:1c:a2:9a:20:56:1a:7c:c1:ab:83:29:b5:99:0d:
25:90:3e:ac:6f:c6:ad:fe:29:1d:d0:83:a7:e0:6d:e3:d3:a4:
ed:1a:a6:bc:7a:95:b0:ea:17:00:55:64:c2:92:90:66:f8:5a:
7f:4b:f8:0d:ba:94:26:f7:fc:4f:4a:3e:c2:bf:a6:21:aa:4a:
55:1b:65:be:b4:ce:69:0b:58:18:68:9b:68:f0:b2:13:45:15:
d6:d9:4e:05:ec:e6:1c:98:35:51:2b:6e:02:66:9b:f0:d4:81:
91:48:db:40:46:0d:b5:58:2f:a5:44:e9:04:6c:cd:8b:80:f0:
57:b6:35:aa:26:bd:f5:4c:71:b2:08:76:4d:c2:15:0f:30:8f:
ae:79:13:7b:aa:51:ea:a9:8a:e2:7a:2f:98:9f:7f:0d:29:74:
ca:6c:24:eb:01:49:88:1d:fb:02:2f:19:dd:85:8a:e3:9c:ec:
0d:04:3c:fa:f7:ea:c7:36:68:90:5e:31:56:1f:9a:44:42:7e:
c0:c2:2b:c6:40:3a:f7:63:a2:50:fc:7e:30:ac:e0:a9:89:aa:
0c:84:2e:65:e6:f2:bf:c8:ae:bc:e2:9b:4f:94:fb:df:fa:f8:
0d:0a:4c:ec:98:e9:77:57:44:3d:f1:d9:eb:88:71:eb:df:2d:
15:33:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:43 2025 by rpki-client