Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: 4rhiSPEkHlev+kwY84R+Yzt8rL6/HzaFKNi4buQFsX4=
Subject key identifier: 6A:71:80:79:35:A4:B7:27:26:3A:15:80:E9:67:AB:BC:F5:2B:1C:40
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01975459DC16F7353E7767BD0F8FD3A2FED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 11:01:04 +0000
Manifest this update: Mon 09 Jun 2025 11:01:04 +0000
Manifest next update: Tue 10 Jun 2025 11:01:04 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: xwdgURDOgCiZhE4diEFk35AJoIqTbbyRJlrsGAlb2Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:dc:16:f7:35:3e:77:67:bd:0f:8f:d3:a2:fe:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jun 9 11:01:04 2025 GMT
Not After : Jun 10 11:01:04 2025 GMT
Subject: CN=6a71807935a4b727263a1580e967abbcf52b1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:4a:d1:20:63:d7:f3:b1:38:df:e2:66:47:
0c:55:5e:08:dd:bf:ca:72:80:6f:ab:4e:02:b0:03:
ce:94:8c:4b:30:36:78:69:4f:cb:1f:e9:76:74:96:
be:64:19:5e:42:b0:a2:31:20:4b:a8:9b:67:3e:c7:
61:ff:47:41:72:1f:b5:19:32:45:52:aa:32:3f:c0:
d7:bf:5a:e1:c4:85:1a:99:2e:1e:6a:b5:0b:2b:05:
ea:8c:69:0a:97:d0:72:31:6a:f9:9e:ee:69:ae:ab:
6a:c8:73:78:47:ba:fc:2f:2c:14:fb:76:12:49:b7:
41:70:96:f2:e6:02:d4:d9:3f:e5:7d:c9:b9:ff:be:
fc:1e:75:63:89:55:ad:0a:f4:16:48:e8:dc:6c:5c:
e7:fd:a9:e4:25:59:64:a9:1f:06:04:8e:73:16:d7:
c3:6b:1b:7b:af:41:27:dd:66:7e:bf:37:18:8a:fe:
26:61:44:5e:f3:29:c0:1f:15:cd:08:e0:6a:b1:59:
f5:e3:11:32:6f:80:13:6b:0c:7d:be:f9:d3:ed:cd:
6a:1a:9e:fa:f3:88:a3:c1:31:96:f2:f5:9d:d8:40:
f4:cf:eb:47:d9:1e:4e:60:44:41:c7:0e:d6:db:b1:
b4:78:e6:dc:52:c5:1e:8e:ef:91:f4:5b:43:74:7b:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:80:79:35:A4:B7:27:26:3A:15:80:E9:67:AB:BC:F5:2B:1C:40
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:98:6f:ee:1f:40:4b:9b:c5:a0:82:96:94:e9:ee:63:31:61:
b7:b8:ff:bc:4c:60:50:22:ae:6f:6a:a3:e8:03:a9:31:78:60:
ab:0c:ee:19:b8:22:c8:4f:4c:2e:1d:2c:27:a9:77:44:85:11:
02:60:b3:57:0e:0c:ae:24:9e:30:a1:3b:48:32:4d:9f:60:74:
0e:0a:66:92:ec:c9:29:4f:d4:71:f2:fb:90:9b:c4:b2:8e:09:
8f:8f:cf:8b:91:0d:d2:21:89:75:92:74:4d:e2:5b:dc:83:bb:
e1:ff:38:f6:3a:46:d4:bc:5b:ae:12:8c:52:0a:ff:8a:75:5c:
bd:b1:3d:d1:15:7a:9b:26:dd:97:46:f4:f7:c5:45:ea:49:63:
e2:cd:49:8c:99:15:13:87:c7:0d:ef:7b:43:c4:74:26:e2:68:
4a:f7:85:5e:09:0f:68:24:1a:a5:72:dc:61:79:30:25:35:5d:
d4:50:c8:e2:84:75:ed:49:19:45:9e:15:1d:c8:78:d8:0c:bf:
ae:69:56:66:7d:cc:2b:55:56:e1:15:ac:53:99:74:0a:40:89:
43:be:c4:94:76:11:d7:a4:0a:cc:b5:18:29:4f:dd:81:4e:48:
4e:64:51:45:fe:37:47:bb:33:ab:a4:c0:01:ba:2f:23:0a:ef:
2a:39:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:21:44 2025 by rpki-client