Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: uwKoiI3UtueLo0q7oX2FR/gVOLlcIaZYJPhDH598Rh0=
Subject key identifier: 5B:4B:13:7D:23:C3:9F:D9:63:DA:22:8E:72:2C:85:73:CA:50:14:EF
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 0198511FFA5462B68AC7684F03830FBA8F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 072A
Signing time: Mon 28 Jul 2025 13:01:46 +0000
Manifest this update: Mon 28 Jul 2025 13:01:46 +0000
Manifest next update: Tue 29 Jul 2025 13:01:46 +0000
Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=)
2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: wZ/m3Df6GOUC7fictZkwi8POUR4aVoV0ALPqOaVxbdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:fa:54:62:b6:8a:c7:68:4f:03:83:0f:ba:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Jul 28 13:01:46 2025 GMT
Not After : Jul 29 13:01:46 2025 GMT
Subject: CN=5b4b137d23c39fd963da228e722c8573ca5014ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:56:ff:2e:be:77:33:b3:c2:e4:92:57:20:
67:08:81:13:79:e3:dc:38:72:d0:25:98:97:74:1f:
53:3a:4f:8c:7d:42:85:56:6e:37:3d:41:38:87:2a:
28:d6:8c:f7:67:49:bf:4e:f1:95:c4:4c:10:72:a4:
ea:d6:2d:93:ff:75:32:df:70:c5:5c:0d:cd:40:9e:
f4:8f:e3:5b:42:75:c9:c1:ef:e1:eb:b2:07:23:2e:
4e:ce:1f:69:0f:c0:a6:46:32:e8:8d:17:03:5a:85:
46:36:20:b4:4d:b9:af:8c:ce:38:33:78:91:e4:57:
56:07:65:4d:6e:91:e2:86:3a:0a:ff:d5:fa:2e:3b:
ee:7d:b5:b7:5a:dd:50:16:20:84:ca:84:e2:97:28:
1f:83:fc:1f:80:7f:c8:ab:e8:63:db:9e:b9:13:42:
b5:c9:85:f6:84:1b:f9:9b:05:1b:43:55:88:83:44:
a6:01:90:39:13:9e:3a:fa:a8:08:e9:66:c6:4f:fc:
d7:13:2f:59:cd:28:79:cc:e7:4e:1b:eb:6c:12:0d:
e4:ca:9d:81:58:8a:e7:57:5d:73:68:16:bd:8d:f2:
69:52:69:0e:0f:50:17:68:47:03:09:01:46:31:3d:
d0:4f:a4:4b:67:d5:06:ac:3a:ec:83:67:0b:06:a4:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:13:7D:23:C3:9F:D9:63:DA:22:8E:72:2C:85:73:CA:50:14:EF
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:4b:01:43:1e:2b:e9:7c:6c:cf:af:85:1a:1d:0d:52:0c:
18:01:30:c9:52:f1:7f:f3:e6:a8:38:f3:09:cd:3c:a0:4e:dc:
e6:13:8c:23:0e:9a:43:7a:d9:21:6a:f9:3d:44:90:a1:48:3f:
c8:78:dc:0f:d5:55:b3:a9:2e:39:78:c3:cc:1c:32:f7:3f:23:
8b:03:5f:09:77:4e:17:3a:6c:65:43:20:1b:75:b4:ba:bb:de:
b2:1e:2f:77:fb:1e:83:fb:73:d7:6d:7d:8e:2c:dc:16:0b:4e:
4c:e0:48:b5:f7:68:d7:28:0b:13:65:fe:fb:69:da:00:9f:d4:
d6:ee:54:4e:b2:0f:40:b1:63:bd:1f:81:f0:76:e3:3c:13:c3:
9d:ae:99:1b:1c:15:69:01:b8:9c:dd:0a:bc:64:8c:8a:99:63:
f6:26:1a:04:d0:40:ad:cd:41:56:ce:3a:cc:4f:5c:27:55:23:
a8:4d:8d:81:13:6f:27:c4:42:ec:3b:9f:13:9c:cd:4e:84:6c:
ff:9e:45:14:54:db:42:9f:55:43:a0:5c:85:32:9e:0a:a7:ea:
fc:a6:53:e6:79:3c:c9:c1:65:0c:f9:ca:0c:0c:a9:dc:29:a3:
95:15:17:3e:8a:74:75:b6:3d:94:8f:3a:84:c2:4b:ce:98:02:
86:c5:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:51:05 2025 by rpki-client