Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: 6n3QcrsKU5qe+0aCjf5Tla/r/UrTWO6bWFJD5Ofk5yI=
Subject key identifier: 1D:CD:DA:D7:1B:52:85:F3:39:6C:3C:48:58:D3:5A:A5:2D:72:26:DE
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0197C681B00CD86B38EFA5AB893EF8323D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 15:01:17 +0000
Manifest this update: Tue 01 Jul 2025 15:01:17 +0000
Manifest next update: Wed 02 Jul 2025 15:01:17 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: GSBZNxH3rRdnzlfsDSH3zsjMzQypDZfsjxNPDXMcb3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:b0:0c:d8:6b:38:ef:a5:ab:89:3e:f8:32:3d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jul 1 15:01:17 2025 GMT
Not After : Jul 2 15:01:17 2025 GMT
Subject: CN=1dcddad71b5285f3396c3c4858d35aa52d7226de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:91:16:43:c6:32:7b:c3:81:6b:18:4c:9f:
5f:ce:4c:2e:9a:49:77:4b:fa:e0:ee:bf:a4:48:79:
cc:c0:ec:9a:64:29:47:f7:b3:12:15:da:05:eb:d7:
08:2e:b7:a0:81:68:f3:47:40:87:da:f2:32:55:6d:
0e:0c:5a:b1:0e:9e:85:b5:ea:78:49:e7:9f:a0:b0:
18:cf:88:4f:a1:a5:55:15:22:6f:8e:47:7f:3a:3d:
03:da:e8:f2:42:23:b8:26:39:08:26:28:e7:87:9b:
8e:98:56:42:8e:47:8c:e1:97:4d:5d:49:c1:9c:42:
d8:76:f1:37:6d:b4:b0:ab:54:11:65:b0:d5:1d:a8:
e3:08:c4:7f:d9:fc:10:c6:6c:af:55:d5:44:8d:97:
ef:fb:be:f6:81:7b:f6:23:f9:b0:01:a4:00:ef:c5:
6a:32:70:63:ae:26:40:f6:ed:69:8a:fd:db:67:ad:
4b:08:cf:19:d4:a8:df:97:0b:10:09:5b:53:d3:60:
9f:5e:93:39:2c:c0:6d:1d:a4:94:58:c4:0b:ea:13:
22:ff:43:6c:ed:11:4b:27:05:f7:9f:4f:df:78:eb:
1c:83:c6:42:85:1c:87:ea:5c:75:23:da:de:a8:2a:
52:90:3f:78:e1:65:be:4f:8f:41:29:23:ca:c6:57:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:DA:D7:1B:52:85:F3:39:6C:3C:48:58:D3:5A:A5:2D:72:26:DE
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:73:4e:78:f3:2b:22:d6:20:d9:a0:5a:07:a3:95:e0:01:
0f:78:16:72:20:51:e1:28:42:ff:dd:e8:7a:0d:85:43:fc:fb:
17:03:2d:ad:18:a0:7b:be:37:ca:21:9f:ea:c6:63:8e:ab:b4:
d2:8a:50:10:96:7b:6b:33:8b:7d:5d:ba:f5:85:94:8b:2d:75:
22:a6:7f:30:ca:f8:29:11:5d:83:1a:75:b5:da:16:42:98:8b:
59:0c:59:a6:fa:7a:ac:c7:7a:0f:03:1d:b0:f8:59:a9:35:8e:
29:c2:77:43:1b:80:99:b2:01:33:8a:ca:51:60:80:82:61:11:
b5:38:c5:ec:1b:c7:ce:75:ee:ca:97:61:0b:34:8e:5e:1e:1f:
4c:81:59:ee:b0:d3:ee:83:69:ef:b2:52:82:f4:dc:be:d7:82:
ce:01:85:de:a1:61:02:b3:d9:ca:0f:86:7e:90:ef:8b:88:72:
ad:d2:00:bc:b9:bc:64:3e:71:69:72:c4:39:12:53:e6:23:4a:
54:33:e4:db:cd:3c:95:12:1d:da:d5:e6:41:72:4f:1a:4e:b8:
99:b0:2f:b0:c2:4e:89:9c:9a:f6:5b:1a:a5:59:d2:bc:7b:7a:
38:6b:bf:4e:10:d8:5a:6d:08:34:9f:1b:28:9e:be:2f:ea:b8:
eb:77:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:21 2025 by rpki-client