Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: e+TEqNTSTtDW9nC43k15N/T1Wnd6g9OW2uAz8ipX6nk=
Subject key identifier: 54:6F:83:BE:DC:8D:DC:74:1C:E8:DA:FE:2D:1A:69:20:2B:B3:1E:F9
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 0197B820C293D9B5BD40888C76408B9F0B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: sm+dKShNTwdiJkCTIwIF398dpK3eoR4eYzpx2nwaqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c2:93:d9:b5:bd:40:88:8c:76:40:8b:9f:0b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=546f83bedc8ddc741ce8dafe2d1a69202bb31ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:96:d5:3b:5f:a3:20:fa:9c:07:6f:88:4e:
10:55:5b:e0:06:18:fd:07:d9:e4:c8:8c:69:24:2b:
14:fd:9d:ab:1a:20:be:6c:12:d8:b6:4b:dd:a1:21:
0e:f0:8e:a6:18:51:ba:38:41:b9:f3:bb:3c:dc:4d:
6f:7e:6a:e1:87:3e:e4:9f:8a:2d:fd:44:9d:11:a3:
ca:eb:bc:2e:97:fc:7d:80:d0:67:29:ee:e9:2d:a7:
f6:54:67:c4:32:98:99:d2:f4:24:dd:50:d1:e6:44:
45:cc:6d:af:ea:10:15:94:a0:0e:26:26:2b:a5:c1:
8d:50:53:94:54:a4:d6:77:a8:7a:7b:58:d3:3a:36:
a0:42:54:f8:d8:1c:95:35:11:12:4a:69:4f:44:a7:
84:88:53:50:24:0d:d7:52:ef:17:6f:93:26:68:4d:
96:ec:8c:7a:f9:50:7c:e0:bc:bc:9c:0e:74:c6:f7:
13:75:77:4a:d0:bf:e9:44:fe:f8:de:1d:f6:8f:b6:
9a:75:9b:36:bc:2a:b5:ec:ff:e0:fb:29:57:76:3b:
0e:d1:29:8a:c0:93:ed:96:46:e4:f1:7d:85:c6:07:
58:a8:6f:31:58:43:72:00:98:43:3a:5e:a7:2c:bd:
cf:80:b2:34:16:7e:82:5a:7a:ad:cb:00:6d:6a:28:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6F:83:BE:DC:8D:DC:74:1C:E8:DA:FE:2D:1A:69:20:2B:B3:1E:F9
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6e:14:7a:77:a5:12:00:29:9e:dc:ee:a8:94:c5:8c:41:d5:
01:db:16:52:23:41:05:4c:f9:f9:4c:39:6d:02:06:8c:ca:61:
1d:6b:92:f6:82:62:53:70:5d:08:ec:ed:bb:dd:21:bf:c9:79:
bb:3a:23:b3:cd:a5:a1:30:db:47:e1:3a:4b:b7:75:0e:52:dd:
b4:eb:91:9a:e2:65:1b:20:e7:b9:e9:fb:40:2b:c8:95:b8:22:
94:22:7c:e6:3f:90:23:37:e5:d5:cb:43:28:5a:68:71:57:02:
2d:4c:65:df:d4:7e:61:a3:ea:05:fd:b4:58:e8:c6:9b:6c:64:
25:ce:ca:78:66:22:03:71:78:80:f4:cb:b7:72:cb:b0:4e:74:
e0:73:ff:e9:bc:26:70:a7:95:6c:87:3e:2e:44:45:9c:ea:b2:
46:2b:0b:35:41:7f:8f:b1:00:39:26:3f:34:58:25:3e:d9:b7:
53:df:5f:99:dd:a8:15:40:fb:37:9b:3d:e6:d5:d8:41:57:db:
dc:91:a4:63:a6:ae:26:80:51:94:87:fd:48:63:64:83:37:43:
c0:b2:dc:92:57:ed:e6:ba:c8:43:d9:a5:b7:23:ad:f5:ae:3a:
88:09:bc:ef:81:d6:08:56:a2:17:30:36:b0:39:36:e7:3c:da:
91:f0:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:39 2025 by rpki-client