Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: RaeeRq+VCMpm/e44BgQ4BFNP1PByI9C+UZFR+9jxapk=
Subject key identifier: 97:04:E0:29:96:D2:0B:5E:3C:03:DB:DA:48:F5:C9:31:C9:35:E5:82
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 019748C355B8984D23CC681AAC09260F9458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0CE9
Signing time: Sat 07 Jun 2025 05:00:50 +0000
Manifest this update: Sat 07 Jun 2025 05:00:50 +0000
Manifest next update: Sun 08 Jun 2025 05:00:50 +0000
Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: S5VJ3Mw7x/pB5uaZ/GvpRrtbWseSJfCZlWdiyIIyETI=)
2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:55:b8:98:4d:23:cc:68:1a:ac:09:26:0f:94:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Jun 7 05:00:50 2025 GMT
Not After : Jun 8 05:00:50 2025 GMT
Subject: CN=9704e02996d20b5e3c03dbda48f5c931c935e582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:8b:e9:bd:ad:5d:be:c7:f9:84:a2:31:ab:
e4:5e:aa:f8:a0:18:10:64:c4:3b:bb:2f:d8:43:73:
ed:0a:be:78:89:b3:2f:8c:2c:e6:35:87:85:a2:82:
cc:8a:b0:da:2a:12:e7:55:51:d8:f8:99:dc:5a:7c:
eb:ea:57:1a:d1:ee:8f:5f:eb:b4:fb:9a:fd:f3:a6:
20:2f:7d:1e:a5:ef:48:4f:24:04:cb:ae:cc:ce:62:
97:ff:85:94:a8:96:4e:ca:eb:c3:f9:a6:9c:2a:1e:
d8:6c:5f:dc:e7:fd:81:cc:7a:f3:09:4d:ec:41:66:
59:e8:e1:87:5d:41:2b:83:50:1d:89:e7:e3:5e:b2:
3b:0c:51:ad:aa:a5:d5:93:a5:2c:f2:d2:17:88:74:
2e:b6:fc:34:73:2d:92:df:0f:af:ef:14:c0:23:6b:
07:d2:fa:ee:d4:27:2e:6c:cf:54:2b:d6:8e:e4:0b:
ce:54:99:e1:86:c5:c7:88:eb:f6:95:0f:ad:a2:63:
7d:82:cc:f1:59:9c:7b:04:da:c6:70:b5:d6:91:42:
00:e3:fc:22:d9:33:73:0c:ff:20:72:c2:8f:79:dd:
23:c1:eb:ae:7e:90:9d:02:e3:fa:9b:60:f7:5a:05:
f0:ff:0a:f5:ef:bb:a7:72:bd:12:7b:bc:68:a5:4f:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:E0:29:96:D2:0B:5E:3C:03:DB:DA:48:F5:C9:31:C9:35:E5:82
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:5e:5f:ce:b6:21:a4:d9:42:72:c8:dd:63:e6:60:d0:06:
75:52:fc:5b:59:96:18:e4:32:4b:50:54:61:e6:53:eb:f0:e4:
c9:d6:12:1d:7d:bc:46:75:ac:ee:2c:08:bd:95:25:be:6a:3a:
de:b9:42:67:c5:13:07:e6:88:26:38:71:c8:9f:7d:5d:9c:14:
49:b2:da:b7:db:d2:38:a1:e2:b0:fa:84:1c:43:e9:09:8e:f5:
3a:47:56:36:c3:35:98:e9:22:14:25:d0:3e:80:ff:9a:c6:24:
58:45:68:27:d3:04:90:da:77:97:c1:fd:12:8e:d7:5c:88:21:
83:38:f7:a7:57:1e:02:bc:be:3d:d0:65:38:d7:8f:94:c7:a4:
10:c3:da:8c:78:a7:5e:e8:e9:c8:0e:6e:d6:0a:20:48:c1:f2:
1e:53:65:ac:9b:a1:f1:92:8c:d5:dd:b3:e0:0a:da:22:3e:ae:
62:e3:1a:c4:a3:e6:20:32:3a:69:82:79:cb:fd:67:dd:8d:81:
30:95:7d:91:cf:eb:23:14:e3:62:c5:d9:fb:fd:ee:03:eb:ed:
b7:c9:7c:ed:11:7c:3a:7c:d6:c4:c3:47:60:3b:83:a8:d0:33:
58:20:7a:39:68:04:76:93:b7:e9:41:17:42:5d:59:80:fd:e3:
aa:f5:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:55 2025 by rpki-client