Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: Kh3nwVEmmdpfySmP6VBKTluHNhjGCBykIhosNSUYsWY=
Subject key identifier: 02:A9:F8:85:7A:50:DD:67:89:41:E5:EE:FC:98:C5:ED:1C:66:E1:F1
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019845BF2D0B4EC2715E9FCEF5CC765A7065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0A3A
Signing time: Sat 26 Jul 2025 08:00:13 +0000
Manifest this update: Sat 26 Jul 2025 08:00:13 +0000
Manifest next update: Sun 27 Jul 2025 08:00:13 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: TVVmz0/8M4GOEXIMrHR4G0yRNasUWh5mfDlpd0ciXAE=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:2d:0b:4e:c2:71:5e:9f:ce:f5:cc:76:5a:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jul 26 08:00:13 2025 GMT
Not After : Jul 27 08:00:13 2025 GMT
Subject: CN=02a9f8857a50dd678941e5eefc98c5ed1c66e1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:74:b9:2e:e8:3a:d7:41:35:0c:c6:cc:a7:
cc:a2:b9:75:2d:f0:db:a4:1d:3b:23:8e:4e:e8:f7:
44:2a:00:c2:ab:c1:4a:53:89:5f:cb:1d:45:63:e2:
34:c6:5c:c2:93:ef:95:5d:b2:6c:9b:37:06:5a:2f:
85:80:e5:7b:16:ef:5f:cd:77:cf:89:93:8d:4a:43:
0e:c7:7c:93:02:54:d7:61:9f:f9:3f:64:aa:f2:58:
a6:54:9d:01:e1:9a:c8:a1:b8:ca:44:20:83:29:9e:
cf:2c:e0:65:3c:73:fa:4e:8d:70:90:cb:26:4e:1f:
7d:8a:38:c8:3b:00:ca:6c:3c:65:b1:76:75:48:20:
2f:56:e5:fc:73:6e:7a:5a:80:93:9b:b3:1b:1f:b1:
59:06:a9:56:70:64:7c:53:bf:45:95:3b:ae:8e:1b:
bc:9f:b5:a6:27:9b:0b:73:43:e3:54:7c:d0:01:d0:
02:6c:8f:71:0a:bd:5d:c8:22:0b:c9:3d:38:9e:7b:
d6:0a:f0:2b:96:59:e3:f9:95:c8:d8:e3:a4:00:2c:
8a:b4:dc:6e:ac:cf:44:13:7b:41:ec:31:4e:4f:18:
7f:50:58:19:15:19:2a:8e:36:34:90:92:cc:9a:a4:
cb:4c:e2:3c:73:12:50:a0:97:d0:4c:e9:a6:8e:04:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:F8:85:7A:50:DD:67:89:41:E5:EE:FC:98:C5:ED:1C:66:E1:F1
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:7d:c2:22:4a:12:4c:5b:30:01:b4:56:fa:cc:f2:fd:4a:
2f:65:0d:48:eb:84:bc:a1:37:17:20:72:ba:0d:5c:b9:16:3f:
9d:1d:c7:6a:3d:49:22:ce:a6:36:bc:1c:28:5c:e6:76:c0:09:
6b:e2:05:29:95:f6:a8:13:91:67:e5:1b:92:d0:29:d7:3d:a2:
80:20:a0:d1:a4:27:f8:22:db:ce:4b:a7:02:34:28:05:b1:bd:
e8:51:76:dc:aa:be:39:6c:ce:cb:25:0c:35:3c:ad:58:c6:16:
2b:7d:ef:13:6e:1c:78:79:23:91:9e:d0:36:50:88:34:87:99:
3f:80:64:14:ed:3c:30:74:c1:6f:82:5b:5d:13:15:58:a4:24:
4a:8a:45:e8:7b:ad:ad:b6:a3:9c:dd:80:94:6a:ac:7d:15:78:
62:60:c3:fe:98:c0:2a:cd:a8:b1:92:5e:71:24:45:f3:55:92:
10:99:91:56:be:bf:b7:38:de:0b:1f:d5:c9:92:67:d8:8e:9d:
64:1c:c0:1e:f0:ce:3c:6b:15:b3:b8:34:9c:1a:53:54:71:e0:
bd:4d:45:da:85:62:ca:25:85:66:e2:c4:60:1f:ab:3a:1f:7d:
67:e5:e2:c7:b2:67:fc:6a:75:6d:07:07:41:c8:ae:e1:98:e2:
dd:88:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:29 2025 by rpki-client