Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: ccBcVy5x6irYfThJK0X3IDcqlBUlhd7fd43flro5INc=
Subject key identifier: E2:81:7E:13:23:5B:28:4B:41:49:EA:D7:63:83:50:F1:66:66:FC:05
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019764A866AD3B27811A7525D3F05BCC9CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1587
Signing time: Thu 12 Jun 2025 15:00:47 +0000
Manifest this update: Thu 12 Jun 2025 15:00:47 +0000
Manifest next update: Fri 13 Jun 2025 15:00:47 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: RbKGANxDTulCq6NlsXvMHBU71MeILOXsle1vq/QkzRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:66:ad:3b:27:81:1a:75:25:d3:f0:5b:cc:9c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Jun 12 15:00:47 2025 GMT
Not After : Jun 13 15:00:47 2025 GMT
Subject: CN=e2817e13235b284b4149ead7638350f16666fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:c0:9d:32:32:91:e7:80:e0:84:67:b4:d9:
2e:f2:30:d8:56:0d:05:1f:bf:b8:87:21:81:98:d1:
65:70:ef:e1:ce:9f:3f:e5:88:06:05:21:f6:1f:c2:
8a:57:95:c8:f6:4e:8a:76:b1:34:6f:ed:b2:74:68:
ab:10:07:07:a6:1e:e8:9c:e5:7b:35:9a:83:73:95:
08:9b:4f:d7:28:83:96:af:b2:ef:38:ad:36:b9:4e:
eb:aa:dc:01:78:f7:7d:34:ce:cc:f8:3c:13:0e:b1:
5c:c3:6d:44:7f:51:ad:03:60:04:ec:55:6f:f4:45:
8a:99:23:71:9e:39:c8:e0:a3:bc:01:ee:aa:6c:0d:
8b:62:55:17:03:8d:71:6f:c1:15:a0:35:62:ab:2a:
fb:f0:d5:e5:e4:28:93:2a:1c:c4:ce:eb:b9:74:5f:
57:bb:15:23:00:aa:04:5a:b6:93:2c:35:8b:e8:d1:
51:65:85:a2:c1:c5:70:f4:07:26:93:e4:7c:a8:92:
5b:4f:f3:75:94:3a:32:d2:f7:22:ca:7a:ac:4d:f0:
ee:cc:11:5f:25:74:84:b9:17:d3:78:e3:a9:a5:12:
cc:67:f8:e0:57:ae:26:e2:be:29:a3:30:ad:8f:e0:
b4:fa:a4:f4:a6:3e:27:ab:89:54:7c:5c:d7:4e:10:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:7E:13:23:5B:28:4B:41:49:EA:D7:63:83:50:F1:66:66:FC:05
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:35:3d:97:f1:61:9c:5b:95:f9:4f:2e:3c:a6:c9:02:e6:
f2:db:67:31:a8:72:35:2b:9c:93:14:2a:d8:e7:ad:b1:2c:c6:
c0:80:11:33:75:50:41:aa:fa:cc:83:ab:1b:3c:6b:9a:84:ef:
2b:25:2b:80:b8:d4:45:d9:57:79:d2:b6:48:ad:fd:34:5e:bd:
5f:8a:b1:29:c5:9a:b3:f9:09:dc:32:08:a9:e7:d0:1a:8a:3a:
d2:6d:9e:b1:01:cf:6e:61:05:90:c8:3b:bb:71:9c:4d:58:31:
4b:18:c2:f2:0b:0a:3a:66:e4:5b:4c:e0:98:5f:8a:85:ac:74:
2a:ea:0d:c6:22:2e:71:89:39:d9:47:70:8d:f2:3e:18:87:c1:
f3:2e:66:bb:b0:25:41:11:95:3f:41:2e:38:24:73:b9:b6:52:
62:ed:e8:e9:cf:7a:4a:69:8c:c7:db:9f:bf:c6:40:ae:6c:8c:
cc:97:da:70:b0:2a:a2:19:cf:2f:b9:10:b2:4e:d2:82:f3:a5:
2e:8b:32:14:03:19:42:ba:83:1e:6f:c5:d2:8c:ff:89:9b:52:
c0:a9:63:dd:f0:8d:d1:cd:97:55:47:79:88:1e:b8:b2:3c:10:
30:9e:1b:ed:98:42:09:7f:bb:2c:42:d3:c9:69:5a:52:67:f7:
75:a0:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:03:17 2025 by rpki-client