Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: XzNT0OFMz5gI8s0GWllle9SbzeRIHeVST+JXbNzTwl4=
Subject key identifier: 02:6C:B0:D6:74:94:A3:FD:41:DD:C5:E2:F6:84:13:C0:F2:58:3C:3D
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019753473291316796FC585D999D8A46E36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 06:01:04 +0000
Manifest this update: Mon 09 Jun 2025 06:01:04 +0000
Manifest next update: Tue 10 Jun 2025 06:01:04 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: 6NYP6i8zaNK56u9BDgzriO1+ugBJcEuOx37jxLQJnn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:32:91:31:67:96:fc:58:5d:99:9d:8a:46:e3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Jun 9 06:01:04 2025 GMT
Not After : Jun 10 06:01:04 2025 GMT
Subject: CN=026cb0d67494a3fd41ddc5e2f68413c0f2583c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:e9:82:f8:60:52:cd:bd:97:d1:5b:62:8b:
64:4c:89:2d:b6:a9:13:41:36:37:0e:ba:49:68:81:
fc:cb:68:65:ae:65:fa:ba:17:5b:8b:a2:64:1a:df:
de:76:47:d5:21:09:e8:c6:be:7a:1c:f9:03:b8:50:
0b:28:e6:49:d8:cf:65:e2:50:9b:32:31:ce:49:74:
94:e8:a6:a7:76:aa:21:f7:f5:b4:2e:2f:ca:d1:6f:
fd:05:a1:0f:9f:d5:94:16:dd:5b:c4:14:aa:9a:0a:
35:41:86:07:87:22:20:d2:8c:8f:98:dc:aa:57:6b:
1e:86:55:6d:2f:c6:21:6c:d7:3e:10:d7:0c:44:ca:
d6:fd:a9:86:07:a9:12:d2:67:cd:5b:d6:e7:61:e8:
64:cf:d7:b7:8d:45:e4:0f:a9:d1:66:7d:ce:1e:6d:
f4:25:71:36:15:3c:2e:ce:7e:0f:71:c8:be:d4:dc:
9f:8e:c0:dd:c8:93:c3:ca:3f:03:d0:46:93:91:34:
f2:8c:3a:d8:fe:58:3b:bb:f3:a3:0a:e8:3e:c7:70:
83:5f:d7:3e:0c:be:75:c5:b6:a0:56:85:98:be:f0:
73:d6:f1:28:65:e2:92:78:c2:fd:5e:82:7f:6a:21:
9d:92:08:3e:96:98:da:69:08:7c:3e:87:2a:30:b2:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:B0:D6:74:94:A3:FD:41:DD:C5:E2:F6:84:13:C0:F2:58:3C:3D
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:9b:10:0a:75:7b:0f:b4:eb:3a:c1:87:d7:bd:22:7c:09:
45:77:10:b8:cc:37:d4:30:f8:a8:e9:95:b8:79:41:21:50:ee:
b1:59:4f:2e:29:5d:74:84:f8:d0:8b:07:f4:c1:4a:c2:bc:dd:
7e:78:0d:10:6d:3f:8d:26:68:9b:c1:86:21:de:0b:a1:c3:be:
aa:09:ff:2f:8e:4b:85:11:d9:23:cd:2a:3a:43:14:71:28:41:
8b:7d:c6:9d:ac:2f:02:52:82:16:df:5e:e3:2e:61:76:3e:52:
6f:95:59:b7:41:3c:24:c4:b6:f5:c0:b5:e1:e8:79:d5:7e:fd:
f1:91:0f:cb:1a:fe:82:85:d5:47:08:0e:b0:16:91:39:95:f1:
76:d4:26:60:dc:73:a1:bf:6a:7b:82:4b:5b:2a:a6:32:d3:e9:
4c:e1:e8:02:d1:17:2d:54:c2:ba:b3:28:89:e6:db:44:76:c7:
d0:78:a6:4d:0d:86:f6:6f:28:4d:a8:50:4b:5b:a9:b8:f8:95:
9f:98:df:b2:bd:73:d5:ae:f7:52:0b:c1:e8:b4:19:f5:b2:b4:
fa:4b:76:7d:9e:74:4e:ce:e1:1b:5b:9f:c7:db:74:c1:44:ec:
8c:61:2a:ad:76:e6:28:1b:7e:64:f3:10:88:3c:8d:03:22:75:
9b:91:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:53:01 2025 by rpki-client