Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: TTJJb+JDOKHYxbKZEMMkYNV15cBvOsjq+MwY8vCgKbU=
Subject key identifier: D8:62:AC:8B:B5:AC:5C:67:4B:23:77:52:6A:9A:1A:D4:3E:90:7D:0B
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 01976EF4F5ECA39B94D70EF3326F3B05DE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0ABB
Signing time: Sat 14 Jun 2025 15:00:36 +0000
Manifest this update: Sat 14 Jun 2025 15:00:36 +0000
Manifest next update: Sun 15 Jun 2025 15:00:36 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: LDOW1VO8pMmYhCunpXWJtYPXx0fr8cmIJywIS7aq070=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f5:ec:a3:9b:94:d7:0e:f3:32:6f:3b:05:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jun 14 15:00:36 2025 GMT
Not After : Jun 15 15:00:36 2025 GMT
Subject: CN=d862ac8bb5ac5c674b2377526a9a1ad43e907d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:80:d1:84:ad:dd:2e:ad:fd:0f:1f:82:ec:
45:1a:72:2b:c8:91:87:7f:43:e2:8b:5c:41:db:66:
46:d2:ab:ed:b5:9f:87:12:b0:90:03:93:ae:94:6f:
5f:bb:94:85:3a:f5:bb:49:d9:52:c3:11:12:78:58:
19:3b:f6:ff:57:1a:5e:a4:a6:9e:cb:46:61:54:7c:
79:1c:b7:6a:4d:0f:47:88:62:ec:67:b3:63:c5:cf:
df:f5:0c:ce:9d:32:52:d7:d3:6f:cd:c9:d0:3c:9a:
52:81:9a:38:e7:ca:d2:64:79:3e:33:20:50:a1:ed:
89:51:67:b2:29:27:53:dd:f0:0f:9e:b1:87:27:e9:
64:75:91:68:39:13:39:11:78:ab:1c:19:fc:5a:cc:
03:86:bf:44:73:c0:d3:a5:6f:dd:14:26:b6:96:3f:
2a:b4:54:47:da:a4:e5:52:10:eb:51:f4:fd:85:55:
5e:df:05:73:23:9c:11:3a:b1:8e:5f:da:f4:01:75:
ca:e0:c0:cf:74:03:ab:28:00:0e:b4:d0:00:7c:d4:
8d:35:48:49:c5:c0:af:7d:ef:25:16:fa:78:89:69:
7e:c8:30:1e:19:92:32:5d:8d:4b:f6:8b:e4:a1:af:
46:14:e0:09:74:9c:01:3b:44:eb:cb:c3:e8:65:0f:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:AC:8B:B5:AC:5C:67:4B:23:77:52:6A:9A:1A:D4:3E:90:7D:0B
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:71:3e:33:57:1a:b1:c4:b2:ae:6a:01:45:e9:b3:91:bd:
da:88:68:66:44:22:8b:8a:1a:58:af:77:40:c2:3d:b6:8f:2b:
b4:62:82:f3:ea:30:0c:3c:e8:e4:41:3c:b1:86:ed:14:da:1f:
10:9b:75:6d:40:91:15:f5:20:1b:4d:d7:4b:df:7a:4c:83:39:
05:65:47:ec:cc:14:b5:dd:78:f1:69:77:4c:07:4d:b8:89:ea:
81:0c:b6:1d:67:56:41:c1:93:87:53:f4:ac:0c:b7:07:08:40:
84:52:24:8f:ec:55:0f:c1:8c:75:10:5f:05:fb:d9:61:cc:1a:
da:fe:e8:72:b2:2a:c0:0d:e2:0a:7f:45:2c:4f:ce:a2:d8:43:
c0:50:fb:97:b7:e6:1d:74:ce:cf:2e:3d:4b:c2:34:22:43:30:
68:6f:33:c3:19:8f:11:d6:cd:ed:4a:8a:03:57:9f:27:c6:c7:
50:d9:c9:3b:f4:ec:ed:54:7e:14:77:ff:c3:29:db:75:6f:df:
3b:cb:c0:81:e3:b3:1b:3b:c8:64:8a:15:ed:42:24:2b:6e:a2:
c3:4b:e9:aa:51:2e:8c:3f:f9:8a:a8:7c:fb:f0:05:35:14:b0:
2d:61:a8:67:3c:08:f7:87:23:ed:fa:f7:70:1f:ee:5a:5f:e9:
af:b4:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:49:09 2025 by rpki-client