Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: oyPpxV9XUUdQ1h/dc4IjjnFOGk/sMC5Ndn01LMEST74=
Subject key identifier: 98:E9:77:C8:92:A6:60:A8:8F:CF:F3:9D:DB:AF:6F:4A:E5:C9:CA:4B
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01974A0CB7C7920BC4A16E8AF550A47C13D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: AgnqgcNkK4riPU6SQr9XOX1nO5lT4GGH1qJhI9t+FkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b7:c7:92:0b:c4:a1:6e:8a:f5:50:a4:7c:13:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=98e977c892a660a88fcff39ddbaf6f4ae5c9ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:a6:e1:8a:fe:1e:99:92:0e:e4:d0:95:be:
09:e6:a1:65:a4:38:b6:e8:b4:9c:9b:12:f0:73:dd:
bb:23:5f:f9:15:2e:a7:81:4a:00:ff:e4:c4:2c:ec:
bb:85:3f:e8:96:56:7b:42:2a:da:d8:9c:07:fc:ba:
a4:d8:08:9c:99:38:2f:92:45:0c:8e:a9:86:39:1c:
3b:41:48:4a:33:b6:ec:77:01:9d:55:74:34:18:37:
47:57:e0:61:57:44:9e:77:9d:09:8e:f0:4f:0c:7c:
f2:b8:f7:88:51:03:37:55:a7:94:64:cc:86:08:87:
32:9d:c5:49:29:d0:9c:27:ef:dd:f5:5b:77:20:03:
08:82:7b:d9:4f:df:73:c4:05:f0:b1:26:3b:a0:09:
6d:bb:23:19:09:b6:20:4b:99:6c:7a:d9:c6:ad:87:
f5:3e:54:cc:e7:c7:d3:ef:5d:ef:99:2e:3a:0a:27:
58:21:14:12:de:11:46:18:28:01:bf:57:7b:17:66:
96:35:9e:21:f6:f9:be:35:98:ac:65:39:8f:eb:ec:
74:37:21:9d:c1:d9:50:91:87:b5:82:c0:3e:dd:3a:
a5:48:64:db:8b:88:ab:81:31:0f:a7:44:62:fb:46:
15:9f:21:14:cc:b7:46:79:01:94:8b:0e:3d:74:54:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:77:C8:92:A6:60:A8:8F:CF:F3:9D:DB:AF:6F:4A:E5:C9:CA:4B
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:ae:5e:80:af:c3:ac:1b:01:15:1f:4d:6d:0e:80:d3:5d:
97:14:e3:8b:e8:61:a4:4a:44:93:8b:1a:de:26:03:bb:b1:a0:
a8:22:05:e8:09:06:2b:f2:d4:77:28:3f:47:73:ac:78:5f:2a:
0e:a0:fe:95:4f:21:6b:4b:6a:75:1e:df:a1:b3:8d:2b:ff:11:
d3:eb:83:d6:af:75:98:85:15:74:da:cb:72:74:cb:cf:6d:16:
8e:07:15:e8:35:7a:64:b9:31:8f:40:18:da:c3:6b:27:b5:a6:
c0:db:2b:c2:51:31:83:bb:a5:22:76:dc:3e:27:7c:df:79:54:
28:1e:75:6b:f5:33:d3:31:28:c4:cd:84:b2:c4:ca:ac:60:7a:
76:2f:d0:eb:5d:58:50:70:f4:c8:b1:b6:4f:9a:f4:33:a5:00:
fd:15:77:99:94:a8:44:60:06:4f:77:14:e4:11:65:2c:bb:14:
ae:92:74:aa:8f:ac:9d:6d:e1:0a:16:b7:f2:31:1f:8a:a2:01:
bc:0c:48:90:d8:ba:4a:7a:2c:5a:18:9a:a7:39:ad:ec:d1:89:
03:9b:2f:c5:1b:65:fb:ae:f1:1f:82:0d:14:51:dd:76:5c:80:
5c:da:dc:be:79:e6:84:67:e0:bb:25:e5:40:80:02:72:d0:c1:
d5:d8:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:57:33 2025 by rpki-client