Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: RQ0b18e2TOB1vZzS/5BCruxGAumWkmWj0yc+xeG+9k0=
Subject key identifier: 36:4B:98:4F:49:FF:B8:A6:C2:DD:64:B7:AF:6B:63:3F:A6:38:24:39
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01984B5346E7585744E55F84904AD5F1ADBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 10:00:05 +0000
Manifest this update: Sun 27 Jul 2025 10:00:05 +0000
Manifest next update: Mon 28 Jul 2025 10:00:05 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: us4dfKNjPK45IaUGLbD/bkpGE++K7U7HP3k19n8is58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:46:e7:58:57:44:e5:5f:84:90:4a:d5:f1:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jul 27 10:00:05 2025 GMT
Not After : Jul 28 10:00:05 2025 GMT
Subject: CN=364b984f49ffb8a6c2dd64b7af6b633fa6382439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:97:c4:50:29:67:ff:98:0a:90:f4:ed:c4:
b4:5c:c1:7e:e5:d1:7c:c5:7f:8e:ae:34:85:cb:08:
eb:30:53:a1:2d:5d:51:ea:8e:b3:49:f7:e4:5c:6e:
6a:1a:77:c4:21:95:ef:30:c8:be:ed:6d:d0:4e:cd:
a6:f6:d9:15:38:01:15:62:82:01:d5:22:12:54:0a:
05:89:64:60:24:0d:a1:75:98:5b:30:52:3f:ca:b3:
2b:e3:81:75:25:b7:aa:e2:f1:f1:04:b9:65:3c:b2:
ec:1a:83:15:f0:ea:92:f3:6b:7f:6b:3e:d2:fe:cc:
13:9f:9b:42:fa:30:b7:d5:b6:16:91:cc:0d:63:8d:
c5:44:af:d6:a9:d8:76:34:b2:01:76:31:62:83:69:
aa:b1:b0:c9:10:86:dd:53:6a:05:f0:f0:6c:61:94:
4c:f3:97:88:fa:0c:52:bd:34:77:50:ff:8b:30:f7:
f1:d6:41:c1:a6:f4:f9:31:b5:f3:23:f6:1b:81:6b:
24:1d:63:91:2f:09:78:e4:5b:15:c9:41:4c:5d:0c:
17:3d:b6:11:15:da:d7:37:22:46:fd:26:9c:b6:f6:
ea:17:71:6d:7f:9b:a3:8d:c6:f0:b6:f8:77:a0:5c:
e7:45:2b:7c:9e:17:8f:d2:a9:ff:45:e6:d5:21:87:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:98:4F:49:FF:B8:A6:C2:DD:64:B7:AF:6B:63:3F:A6:38:24:39
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0e:88:d9:a6:ec:f2:de:b5:aa:33:9f:6b:e4:7d:05:17:60:
c6:e4:7c:85:51:10:a5:09:14:7e:e3:a6:d8:22:a1:65:8f:ec:
35:ed:6e:8e:72:9b:24:91:2d:fd:38:e2:e9:a5:cb:98:19:53:
f2:2e:dd:25:e5:b8:32:25:7c:61:b1:fd:d0:20:8b:22:6d:39:
9d:f7:a9:1b:6e:42:b7:0f:82:a7:b2:b3:51:11:d9:68:34:18:
04:ba:c1:6a:50:e1:62:e3:55:b0:13:00:84:3f:af:73:76:06:
f5:ba:18:38:0f:ea:dd:8c:4e:92:b8:e8:a3:7f:cc:e9:6a:99:
eb:b9:25:f8:d9:08:c5:c3:73:83:0f:9e:35:f8:f0:98:26:b4:
7a:eb:9a:cd:d4:a4:f7:f3:73:9a:cc:7b:19:62:3c:09:48:3d:
b2:d9:d6:51:92:12:ba:91:26:b0:31:29:38:eb:40:be:63:62:
67:e4:b2:a8:bd:1d:87:fd:44:72:bf:1f:39:d2:17:98:55:50:
33:0e:e4:b1:36:d6:56:55:7d:4d:83:0e:75:17:1c:ee:f5:df:
98:25:f1:78:db:f8:4d:84:15:26:ee:4c:9f:be:4c:b4:0b:4c:
c9:b4:a2:0c:10:1d:bc:95:b1:8c:27:04:65:48:dd:19:09:14:
01:ec:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:29:41 2025 by rpki-client