Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: 14zEwvpcpVqpg8BA7/BsxPnRFgX8QuL3Ng+yNfi+rOc=
Subject key identifier: B5:E2:E1:C0:6D:49:52:0F:E9:39:01:26:E1:8A:EE:2F:BA:51:CB:78
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019750B3E250A65C2C57FCE407728772E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0BAC
Signing time: Sun 08 Jun 2025 18:00:55 +0000
Manifest this update: Sun 08 Jun 2025 18:00:55 +0000
Manifest next update: Mon 09 Jun 2025 18:00:55 +0000
Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: 0gYpxJfsiKBpsB1l90eZg7+2XVAzIjire0zmx5W4Tnc=)
2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:e2:50:a6:5c:2c:57:fc:e4:07:72:87:72:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Jun 8 18:00:55 2025 GMT
Not After : Jun 9 18:00:55 2025 GMT
Subject: CN=b5e2e1c06d49520fe9390126e18aee2fba51cb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:c3:58:35:72:2d:6c:a3:4f:dd:d0:c3:12:
2d:63:01:6e:ac:d4:d4:fa:f2:30:ca:55:10:58:c2:
cf:7a:9c:63:ce:d3:38:6d:86:57:3f:e5:09:e4:d0:
56:53:5c:ae:7c:31:ac:22:43:27:21:f5:48:2f:c9:
fe:9d:99:94:15:d2:bd:45:12:2f:6f:03:21:24:b2:
23:0b:37:ed:ef:a3:0c:1f:85:22:97:91:ec:77:8a:
76:94:3d:6a:5f:83:54:c9:a9:3d:b5:49:5c:b7:fb:
31:ba:db:9c:e0:60:b7:ee:b3:b1:ea:02:1e:51:85:
3c:5f:1b:e8:e6:59:7c:76:58:9f:03:b3:17:d9:dd:
8b:78:1f:34:c4:75:5e:1c:c9:cf:e4:51:f0:fe:98:
b5:ea:87:a9:db:fa:8c:3a:2f:61:a2:16:cb:b5:a5:
4c:2e:ed:82:6c:a2:51:f2:a2:6f:f5:98:7d:14:67:
9b:4b:10:70:33:ed:d0:5b:b8:70:5a:1f:b9:0a:de:
d6:e0:6d:ca:7c:9c:60:81:d9:ab:39:d5:7b:dc:d3:
0a:de:c7:b8:22:ef:a6:d5:12:6d:b1:42:03:3d:62:
56:1d:9d:90:62:6f:8b:ef:a5:83:76:de:28:f4:90:
dc:81:f2:3c:4f:b3:e4:d0:aa:60:f9:ab:0a:22:17:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:E1:C0:6D:49:52:0F:E9:39:01:26:E1:8A:EE:2F:BA:51:CB:78
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:b1:13:8f:c2:4c:da:e4:69:a2:e7:dd:c7:b8:b8:4b:79:ec:
31:af:45:63:5a:1d:98:d7:6f:e9:b6:3a:9c:14:dc:13:68:fa:
a9:7f:b5:e5:db:aa:f5:2c:df:6d:a9:98:e1:b6:8c:78:0b:15:
72:08:26:65:a9:23:2b:99:d9:d7:fe:1b:ab:59:fa:e8:39:f3:
8d:aa:c1:51:e0:3a:21:14:0a:fc:4d:aa:66:98:f4:44:f5:2e:
cf:a6:00:19:65:01:45:7a:74:c0:45:a7:42:76:01:60:a4:df:
28:31:98:ee:f1:de:72:c6:47:17:43:a5:12:7c:60:3c:d8:84:
17:c3:3d:d2:71:44:93:09:12:81:8c:b0:b2:d8:b9:e0:15:29:
f4:46:93:cf:4d:44:39:6e:29:63:94:41:ec:4e:27:93:e9:e6:
77:cf:07:21:0b:5b:df:43:f6:da:a9:16:cb:6f:ba:cc:dc:d1:
34:26:b6:7c:41:03:ae:d7:fe:01:21:96:f0:52:75:b6:b7:ec:
04:b7:e8:8c:4e:e1:49:e8:25:66:95:0e:94:52:30:9b:56:9b:
77:16:60:7c:20:e9:ab:13:0a:bc:29:e2:d6:c6:7e:c9:d5:b3:
b0:ce:6a:82:87:1e:96:01:21:6e:75:93:00:8c:c3:94:e1:8c:
7c:43:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:06 2025 by rpki-client