Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: EDK4Mx1rs5jvNx+w/sjbXXSj5COBTGPuBxrAYsE/i2Q=
Subject key identifier: 3D:AA:6C:82:12:A1:91:1E:56:CA:32:90:18:E8:96:4D:C3:FD:99:E3
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0197504619B0D7BDA83413B1A3DB43F2707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 16:01:00 +0000
Manifest this update: Sun 08 Jun 2025 16:01:00 +0000
Manifest next update: Mon 09 Jun 2025 16:01:00 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: gWvubDlFDwy0cDb+ORmi5uPCpl3mal4kuRCxTJj4Slg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:19:b0:d7:bd:a8:34:13:b1:a3:db:43:f2:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jun 8 16:01:00 2025 GMT
Not After : Jun 9 16:01:00 2025 GMT
Subject: CN=3daa6c8212a1911e56ca329018e8964dc3fd99e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8b:d2:02:3e:a6:bd:fb:86:85:8a:64:56:b4:
37:39:d6:70:fa:e9:64:3b:d5:29:ff:57:f1:57:73:
75:1d:d6:f3:14:aa:61:d9:6f:b6:45:d4:58:42:77:
c2:92:f8:da:19:c5:c6:9a:db:d8:a1:85:a1:14:28:
bd:b9:96:91:27:85:69:40:e8:40:a8:79:92:89:e5:
dd:42:ca:80:be:ea:15:b8:8f:22:12:d6:15:a1:80:
74:7b:c2:76:9b:76:f4:82:b8:a8:b8:4d:87:f3:3a:
cf:79:c2:82:9d:1b:53:0e:b5:64:23:36:c6:78:ab:
2d:46:5a:84:bd:59:7b:92:02:66:18:eb:89:fe:a6:
fd:74:16:43:2e:04:9a:52:af:af:38:f1:0f:b4:b8:
ce:14:f2:9d:be:cd:e9:21:c5:92:36:b7:81:61:e3:
33:1f:50:0e:37:00:45:1c:7e:3a:3e:3a:fb:ae:68:
c1:7d:8f:ee:d4:cd:ca:73:95:4f:66:0b:c1:87:4a:
80:ab:27:49:f5:86:94:ed:d5:02:07:00:90:74:ac:
84:3a:00:72:a7:14:7c:6b:f2:1a:9f:5b:f8:fb:4c:
4b:e0:bc:75:da:fa:f7:06:3b:a7:78:b8:07:cd:a9:
65:56:f0:c4:9a:22:3f:61:fe:09:9d:0c:c9:fa:9b:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:6C:82:12:A1:91:1E:56:CA:32:90:18:E8:96:4D:C3:FD:99:E3
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:74:04:a4:3c:15:fb:fb:86:f0:6c:29:c8:9e:c7:3e:e6:3f:
8e:f7:74:be:97:58:b6:1b:ed:79:e0:a7:9a:7b:b8:82:a7:8c:
c5:8d:2a:55:ed:45:33:0e:b4:24:87:62:21:22:d6:1a:6e:bd:
8f:50:71:24:9e:44:51:c8:c0:d1:f9:cc:9b:4f:a8:6d:62:a7:
9b:0b:8f:44:3d:05:01:a2:62:57:ce:34:26:2a:73:ef:c1:7e:
6c:93:c5:67:c0:d9:f4:2e:e1:ad:e2:e3:3e:ed:e4:ed:2e:51:
28:01:4f:e9:d4:fa:d2:0a:b2:ce:68:ae:c7:2b:ee:bb:f4:b4:
a9:66:d1:3c:f8:02:7f:aa:41:ef:47:86:66:ef:21:f9:0b:fd:
a1:f6:4a:a4:18:df:06:cb:b6:1a:f4:f4:fc:39:54:2e:31:09:
31:23:59:e2:ce:bc:77:f9:64:01:5f:d6:3b:90:a0:b9:d7:f4:
e8:e3:2f:71:df:cd:20:71:8d:77:ca:a9:c7:e7:b8:d2:0e:70:
13:4b:59:75:40:77:b9:51:70:a5:8c:4f:bd:c0:6e:b9:97:c3:
3a:bf:a5:37:3a:79:ad:8b:d1:9b:b6:07:82:cc:13:09:40:5b:
e6:44:47:25:89:fe:20:ff:23:76:01:4b:37:ee:13:5a:a0:8f:
e2:4f:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:58 2025 by rpki-client