Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
File: _6PlUUHBofny4ogR7X53-tN4pXk.mft (raw, json)
Hash identifier: hSagHtSvORn6zxERM4e36RG2CHTo5O5AhKktc/wVnmI=
Subject key identifier: A0:B2:B1:79:C5:C1:B8:CF:B9:51:07:1E:06:45:BF:78:E9:5E:C8:80
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0197C982B9316663B7405B9F760F5A6DCDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
Manifest number: 34
Signing time: Wed 02 Jul 2025 05:01:16 +0000
Manifest this update: Wed 02 Jul 2025 05:01:16 +0000
Manifest next update: Thu 03 Jul 2025 05:01:16 +0000
Files and hashes: 1: ALc01kVyhc1UkHuiUhk_LjqWlbg.roa (hash: 9fbpUHN18yGt5ShjC5SeiWKJWScB0f/zJx4TfIiScOY=)
2: _6PlUUHBofny4ogR7X53-tN4pXk.crl (hash: KEBxsqHun54hBBbQAd16ZLPU2AhgKmFvyS3it4R3hC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:b9:31:66:63:b7:40:5b:9f:76:0f:5a:6d:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 2 05:01:16 2025 GMT
Not After : Jul 3 05:01:16 2025 GMT
Subject: CN=a0b2b179c5c1b8cfb951071e0645bf78e95ec880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:1b:ab:5b:2a:f5:56:84:dc:c1:89:de:d9:
97:bb:ad:29:12:e8:b9:c9:54:7f:a7:65:07:b7:75:
15:d8:24:67:7b:f5:a9:36:e3:a3:b0:d6:e5:9b:18:
0a:17:7b:f5:b3:b5:8d:b9:47:8c:4b:28:89:3e:9c:
e9:f0:d5:2d:da:6d:8d:54:79:db:c3:e7:0d:02:27:
d6:e8:90:ba:25:da:22:a5:d8:7e:9d:39:4c:ef:9d:
f7:9f:20:fb:55:da:25:4c:73:f4:eb:50:6c:d2:f3:
a5:38:75:29:f7:a3:51:7b:29:82:98:79:e8:d0:ad:
c6:7e:7d:8f:a4:91:67:bc:37:e1:38:d5:58:2f:f8:
e3:5b:c8:eb:48:f1:60:ef:ce:d4:09:c3:d8:f5:0d:
d2:86:20:6a:27:d3:cc:1e:d6:7c:87:01:3b:78:d0:
37:08:23:67:ec:7e:02:17:a8:bd:78:cc:78:3b:cb:
4c:20:00:95:52:c2:10:39:d4:87:de:b9:3d:45:41:
7d:53:6b:f4:06:b0:f4:03:ea:2f:a7:f7:9b:b7:df:
9a:98:8d:53:5c:a1:d2:2f:bd:6e:0b:8d:a2:d4:4f:
bb:d0:81:f7:24:c8:27:44:84:50:18:2b:e0:14:06:
39:db:9f:06:45:e5:99:6b:6b:02:15:09:38:09:31:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:B1:79:C5:C1:B8:CF:B9:51:07:1E:06:45:BF:78:E9:5E:C8:80
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:3a:58:2f:41:a7:a9:9e:2e:4d:26:67:07:a2:81:8a:e1:
1c:39:c1:5b:fa:36:bc:ee:94:1d:4a:ab:7c:43:05:29:54:46:
04:85:dc:7d:24:f1:7d:ae:c8:7d:16:35:82:47:fa:e2:59:90:
24:b0:69:0d:fb:6b:60:73:be:34:f2:5c:7e:fa:8c:3a:b2:0d:
a9:af:d6:57:e1:eb:7d:77:36:86:08:3b:57:e1:66:3f:b5:27:
f4:96:88:04:e2:cb:e7:09:18:2a:23:9c:cd:57:13:97:d2:8a:
05:39:2d:4c:10:59:ea:11:1a:67:4e:da:bc:51:36:9a:5f:23:
ad:56:0d:ed:e7:67:c4:f6:d4:20:9a:cc:f4:60:85:0f:83:95:
9d:1e:7e:9d:2f:f8:57:12:41:58:bd:8c:be:78:5f:b9:2c:e4:
68:51:5e:6e:b3:f1:fe:f8:2f:4e:d4:9d:e6:d1:14:11:4e:b6:
b4:49:1a:13:4f:27:f0:95:20:a6:9b:31:b7:fd:26:04:56:b9:
18:98:72:46:c9:36:b8:f0:9b:48:5f:9b:86:d5:1b:60:72:c6:
1b:34:31:9c:46:10:f2:07:87:f3:94:98:9a:12:b7:15:96:88:
20:dd:d6:63:06:5f:a6:66:54:c0:aa:2a:77:71:ec:95:b1:a3:
da:1f:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:51:06 2025 by rpki-client