Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: NmZVvE24Xm51hqB5GyHQooiuUNV8M7eFb275C2geEY8=
Subject key identifier: 42:14:D9:20:6C:39:5B:5E:4A:DE:7A:E0:4A:5D:A1:4F:23:1C:F7:ED
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019759B6DEF1FBFB790F0228F4A7A5318CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0AB0
Signing time: Tue 10 Jun 2025 12:00:46 +0000
Manifest this update: Tue 10 Jun 2025 12:00:46 +0000
Manifest next update: Wed 11 Jun 2025 12:00:46 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: Ao62cOzFqajHe7+Gh5/bVv9Fn1XH7PqIXDTC0NhMlTE=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:de:f1:fb:fb:79:0f:02:28:f4:a7:a5:31:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jun 10 12:00:46 2025 GMT
Not After : Jun 11 12:00:46 2025 GMT
Subject: CN=4214d9206c395b5e4ade7ae04a5da14f231cf7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:1c:23:09:47:39:fd:99:c3:61:52:e2:ab:
13:8a:5d:de:8b:21:ab:9f:67:52:a2:53:d0:70:46:
3b:77:3e:2c:12:e0:68:dd:b6:ad:a4:46:64:f9:76:
10:80:9e:90:25:f7:e9:ed:0c:ad:51:7d:7a:54:85:
e3:2f:86:6e:ad:b0:e7:47:b3:2a:20:e0:56:8d:90:
54:17:10:d7:41:c8:64:16:a6:e9:3a:90:43:b1:81:
ee:8e:a5:d2:69:1d:7f:0c:59:de:e5:84:93:95:12:
3d:2f:f8:20:88:3a:a2:0e:bf:8f:9a:84:52:c3:f9:
21:2d:07:84:1b:55:72:31:85:d9:04:20:7b:53:c4:
0b:ae:bc:a8:60:eb:b5:5c:fa:f8:1d:7e:83:92:01:
2f:e7:0b:c2:d7:15:39:99:ae:0a:a0:bc:65:45:b3:
3d:11:06:36:09:16:e7:8e:3f:55:df:b8:88:cc:07:
22:1c:7b:4d:d9:2e:54:72:65:76:6c:1e:02:7c:43:
ad:6f:c4:cb:f1:49:ac:01:fd:c7:0f:e1:34:51:19:
29:1d:8c:de:f8:c2:53:11:89:1c:f3:00:0c:8e:4e:
26:09:47:73:b5:de:25:4a:28:b9:ec:24:72:33:35:
b8:fe:cd:79:b9:3f:79:c1:3a:8b:e5:53:c5:2e:f6:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:D9:20:6C:39:5B:5E:4A:DE:7A:E0:4A:5D:A1:4F:23:1C:F7:ED
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:36:ba:3a:7f:38:a3:6b:1f:4e:be:9e:33:14:4d:39:25:21:
7f:3f:72:4f:87:bf:95:05:b3:ce:ab:f3:ad:3a:32:21:71:56:
93:7d:c9:9d:c2:9f:94:50:ab:17:09:9f:1d:2f:58:dd:44:cf:
2c:e2:14:57:a7:cb:f9:f9:e4:cc:47:5e:51:43:34:d4:81:4c:
6b:29:3a:2f:dd:53:c0:ed:92:18:d7:14:3b:e0:1e:45:14:3a:
47:48:09:d8:4c:f1:83:f7:69:34:e0:19:b5:1c:af:4a:25:36:
e5:8d:40:9d:b5:50:d3:e9:24:7a:0f:6b:b8:ad:8b:2b:a6:67:
70:14:a6:fd:22:c1:59:10:95:e9:84:15:e6:54:ea:be:73:b9:
a9:d6:e7:94:bb:18:2c:b1:f6:be:5b:b8:02:ae:cf:d5:b6:d3:
4a:95:07:ef:8f:45:08:b6:3e:99:c3:e3:fe:91:8b:de:26:e9:
f0:b7:69:5a:58:fb:9f:45:c0:ff:f2:3e:3c:46:c4:10:97:1c:
ca:50:e2:ba:fa:55:97:02:59:4e:b6:06:ca:9f:3a:8f:b5:0b:
b8:a2:8b:4a:0f:b5:d2:9f:9b:27:52:07:82:7a:cb:4b:20:a2:
2f:3e:bc:68:fd:47:07:9d:82:53:c2:60:46:92:10:dd:4d:bd:
75:ff:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:58:05 2025 by rpki-client