Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: ajjGl+BnJi2LqZVxqgLz9W6dG+BfHQTx1P7L0En6Z08=
Subject key identifier: 9B:1F:90:06:FB:C0:FE:B1:AA:12:6E:A2:A7:89:5E:CC:FE:D6:69:74
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 0197B7B2ED9B9BBB7072678F084793F89FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 12B0
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: pxO5OOwUfs0CNGJY5Aq3LvNhH42d+7ttgqnVJ71aP8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ed:9b:9b:bb:70:72:67:8f:08:47:93:f8:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=9b1f9006fbc0feb1aa126ea2a7895eccfed66974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:7d:5f:d0:1f:0d:bf:f7:3f:f5:05:d2:47:
4f:ec:1b:bb:15:82:fd:55:0d:12:d9:19:8d:fb:0e:
5b:e5:a3:4a:47:91:a0:bd:f2:93:40:41:37:c0:c6:
0e:70:ac:b3:10:3d:b9:f0:6b:88:58:5e:7c:e7:f3:
80:cf:80:bd:6b:33:8b:c6:77:1f:4f:63:e9:12:a3:
cd:d5:c8:2c:9c:bd:7d:b2:57:93:7a:9a:40:81:b8:
a8:a4:7f:57:db:f1:e2:b4:e9:a1:d8:37:a1:89:cb:
a5:4a:65:a2:0d:46:56:57:6b:e6:f1:5d:fb:f6:8e:
99:99:45:3a:fc:16:46:60:f2:1d:d8:ee:23:20:cd:
6c:81:f3:ea:fd:48:60:3b:0a:67:50:75:03:0c:7c:
41:f7:49:50:83:ae:03:1f:7a:a5:c3:49:16:ce:84:
5f:7a:77:d8:4a:c1:9c:c5:4c:be:09:56:6f:b7:2c:
5f:4e:7f:da:53:77:50:07:72:3d:96:0a:d9:8b:62:
8a:a1:3e:d0:36:29:7a:69:a4:94:82:ac:c9:02:d5:
2a:f9:4c:61:93:a1:b0:2e:f2:24:54:72:e1:fc:24:
33:c7:d1:2c:db:cc:42:f7:3c:97:8f:b5:8a:9b:72:
ae:71:79:27:48:0d:75:13:52:a7:4a:4e:51:18:da:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:90:06:FB:C0:FE:B1:AA:12:6E:A2:A7:89:5E:CC:FE:D6:69:74
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:d8:67:e8:d3:1f:74:56:97:50:4d:bb:b2:32:55:0c:83:
0c:b3:a3:52:af:24:fd:76:6b:43:01:07:79:11:fa:5a:3f:e5:
8d:eb:5a:46:d8:1c:76:ed:e8:54:e7:a5:94:31:71:6c:fd:ae:
52:1e:9f:e0:1f:22:c6:27:01:0c:e5:b3:ec:a2:01:c2:93:1b:
dd:4e:1a:92:21:c7:6e:19:a3:bc:1a:ab:80:d6:dd:e4:ca:a0:
92:af:b4:ea:1b:1e:90:5e:8b:fc:5f:e1:19:de:d9:9f:d1:97:
b0:00:8c:c0:00:26:c2:01:b8:07:ee:82:91:26:ee:1d:7d:ef:
83:da:89:51:42:89:15:94:f9:e5:1f:fe:a0:6c:8a:20:47:da:
bc:1c:41:99:f0:aa:c6:08:17:a1:d7:a1:53:6b:ce:37:d6:34:
87:0f:89:66:2f:b6:db:00:35:89:4b:c2:e6:c5:e9:20:4d:30:
ce:c4:17:7e:4e:72:69:ab:b1:a5:12:a4:f1:de:0a:90:08:2c:
88:17:81:a4:9b:b9:a1:ad:ed:ca:64:07:fe:22:b4:1c:df:1c:
9c:8f:27:90:dd:1e:95:02:cf:74:4a:cc:a9:34:53:1b:89:4b:
c3:7a:f0:ae:8e:79:8d:d4:6e:ec:b7:4e:aa:86:fe:80:d3:ac:
92:6c:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:42 2025 by rpki-client