Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: 4h9h4t/ua3W2EUtOHL+VfhlY5SMHukKcIoZFR8KhA3c=
Subject key identifier: 54:12:56:70:59:63:D5:FB:5B:37:C9:91:EB:95:5C:5C:F2:AB:83:0E
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01974A7A666C79996E4B5840807022910281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 067A
Signing time: Sat 07 Jun 2025 13:00:24 +0000
Manifest this update: Sat 07 Jun 2025 13:00:24 +0000
Manifest next update: Sun 08 Jun 2025 13:00:24 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: hgfMRSZLwD9TKZIBbt4e1VLQbvzYnmPEs+CC5Y8ilGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:66:6c:79:99:6e:4b:58:40:80:70:22:91:02:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jun 7 13:00:24 2025 GMT
Not After : Jun 8 13:00:24 2025 GMT
Subject: CN=541256705963d5fb5b37c991eb955c5cf2ab830e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:14:0d:83:1d:79:94:2e:de:bb:9d:16:30:
1b:b9:99:27:60:26:8a:45:9c:0e:1e:60:2d:d7:bc:
d8:1a:c4:59:6b:ce:91:4e:d0:15:4c:39:20:ee:82:
3f:33:c6:3e:2a:a1:04:d4:a5:4e:1b:e7:23:03:6a:
3d:16:33:2b:0f:32:b5:59:58:fe:9b:70:94:cd:33:
b5:9b:3e:65:40:52:d2:1a:fd:2d:79:9b:26:0d:97:
b0:ad:b8:f3:84:30:ee:2c:87:1a:dc:e2:5a:06:49:
ed:5d:ed:9a:d1:84:d9:b3:5a:1a:66:0b:a4:94:1d:
ea:e7:7a:07:83:1e:20:3c:9f:94:bf:5f:9d:67:24:
05:c4:b5:63:d3:80:0d:db:23:64:ec:d6:28:c6:6c:
5e:28:44:be:c9:9a:4c:0b:44:99:13:5a:c4:ef:56:
a5:e7:e8:1d:a4:60:70:9d:73:28:5c:ac:a5:50:a0:
56:86:6b:7a:3a:03:70:b4:dd:64:8a:48:33:52:65:
80:7e:09:a9:1d:4f:32:bf:92:7d:ca:cc:bb:7c:dd:
5a:af:b5:49:66:3d:d1:dc:ef:20:86:8e:7e:8f:80:
9b:83:12:c7:25:18:55:9c:ff:d0:63:44:4d:b9:df:
92:34:85:cd:f4:b5:0f:ca:22:84:50:ed:7c:54:27:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:56:70:59:63:D5:FB:5B:37:C9:91:EB:95:5C:5C:F2:AB:83:0E
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:79:fc:5e:60:7e:39:5d:b7:a0:f5:f0:2d:a2:b3:bf:19:87:
2b:c1:21:49:3a:e2:20:10:cc:aa:7d:dd:7d:80:b0:cd:f3:33:
34:d7:9c:a9:6c:c4:54:9a:be:80:22:de:7e:3e:52:61:74:d9:
cc:2e:40:ec:b3:70:2b:bb:8b:63:0e:1e:b5:13:5a:f0:16:a2:
01:1e:5b:96:e2:17:9b:22:a3:fa:11:53:66:23:d9:42:00:3b:
0e:07:f6:c8:14:9a:c6:b7:9f:4f:4d:c8:13:03:6d:20:2e:27:
6c:72:97:93:56:0d:bd:e1:6f:9c:a3:40:19:02:cb:64:cc:c6:
dd:ce:e6:f2:bf:d9:ed:e2:48:b2:29:92:a9:7f:77:b0:c1:44:
93:e0:b9:53:19:a9:fa:66:a5:b0:7b:e6:4a:9f:13:a7:94:ec:
20:3c:91:e7:68:c6:a7:cd:d4:07:5b:1d:16:2c:25:18:fa:e0:
55:e1:37:0e:3a:1a:fc:2e:97:cd:57:22:1f:fa:b8:41:1e:f5:
8c:a3:14:bd:16:6f:24:58:7a:fc:d3:1e:29:dd:fb:6f:b8:17:
4a:6f:b6:e7:46:28:b8:b2:87:44:27:ac:78:a3:75:98:5e:7c:
6e:32:40:fd:65:64:e5:7d:02:1c:8f:13:7f:e3:a3:1e:6f:e9:
46:88:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:35 2025 by rpki-client