Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: /gMM6CeveA+6NMVEQvmJ+ZxFXfVpc95hctth6i+RiPw=
Subject key identifier: D5:73:82:0D:9A:9B:82:6F:09:FA:82:01:B7:B6:BA:06:01:37:F3:7F
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 01974F32F89BE5B7E5C0A25472F1A481025D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 034B
Signing time: Sun 08 Jun 2025 11:00:29 +0000
Manifest this update: Sun 08 Jun 2025 11:00:29 +0000
Manifest next update: Mon 09 Jun 2025 11:00:29 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: vOjWon94Tzyhd+/0RsZFe5Bfjy8of8N6Jjmf2MwbOQ4=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:f8:9b:e5:b7:e5:c0:a2:54:72:f1:a4:81:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Jun 8 11:00:29 2025 GMT
Not After : Jun 9 11:00:29 2025 GMT
Subject: CN=d573820d9a9b826f09fa8201b7b6ba060137f37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:4d:2a:05:8f:55:17:b0:72:06:9a:51:c8:
cb:6c:56:c0:d8:14:5b:65:1a:32:cb:14:07:7a:45:
05:0c:00:8b:01:46:9f:8c:68:0d:2f:57:3e:ac:a4:
09:c7:24:4e:a4:5c:22:88:68:ef:63:f7:aa:d7:63:
11:c8:0d:94:18:21:59:5e:ec:88:17:13:ad:49:c8:
b9:44:f1:3f:6e:c2:5c:92:1a:f2:8f:5e:30:53:5e:
12:f8:4c:28:c8:c0:e6:42:10:e3:3f:8d:d4:8a:99:
ff:c2:48:2e:2f:a6:30:7f:79:3d:2d:e5:ed:8f:e8:
99:9f:98:aa:88:a3:77:b1:91:9f:82:68:36:b8:0f:
6e:98:8d:5e:fe:5d:b3:26:d0:61:4f:a3:fb:ea:a6:
96:44:39:bd:60:0a:f8:2f:b7:0b:7d:9f:8a:39:f4:
71:e5:1f:e6:ec:a7:fa:d2:ad:8f:d3:9d:d4:3e:c0:
e6:dd:7f:c7:80:a8:ea:42:28:24:cd:77:0d:2a:96:
e6:05:99:3f:74:62:41:bd:04:dc:bf:27:2c:c0:a0:
f2:e5:67:bc:ad:a0:84:e0:4d:da:58:c9:67:26:5b:
f0:f2:19:4f:29:a4:32:7e:79:8d:50:86:85:7e:44:
cb:ce:bb:a8:f8:74:0a:fe:09:97:29:39:60:82:46:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:82:0D:9A:9B:82:6F:09:FA:82:01:B7:B6:BA:06:01:37:F3:7F
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c4:92:c3:81:0b:54:88:83:f0:20:d7:64:2f:be:f2:ee:1a:
54:08:09:c7:1b:8a:06:af:d0:83:8e:44:bd:77:4c:89:50:1b:
d5:c0:55:be:cc:5c:b3:c1:fe:cc:13:b7:c1:a2:f4:87:49:9f:
05:30:ad:b2:85:9a:98:9f:67:2f:fd:d8:a2:e1:0b:f4:0c:fc:
44:03:01:2d:b4:51:ed:ff:60:57:5b:d4:8a:3a:1d:10:50:8e:
56:bb:0e:22:2d:d7:0a:92:82:aa:3c:8c:48:7f:48:bf:e2:a7:
a8:be:04:fd:7a:21:86:cf:9c:c0:9b:4c:3a:8c:69:ff:d2:82:
67:55:bf:c9:c1:50:22:05:28:1d:d3:97:93:76:0e:05:53:e6:
5d:3c:b0:c2:96:c3:a3:5d:28:66:48:3a:60:6b:fc:ab:57:bc:
38:65:64:e7:16:54:22:1a:82:4a:aa:4d:06:d4:ba:c4:d3:17:
05:34:20:31:ca:2d:23:12:ee:03:ab:24:f5:e6:af:bb:74:ca:
7b:da:36:99:06:b0:c8:54:54:a7:d1:ab:ed:76:eb:42:ce:1d:
c7:b3:e1:af:6a:66:15:cf:38:42:e8:31:de:56:af:e3:27:b1:
4f:2b:1a:fa:31:c6:0e:3b:fa:d2:f6:33:54:e7:de:67:68:69:
2a:b4:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:52:09 2025 by rpki-client