Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: NTZBI3yp7IHBzxOE61KEaqwTZft8Ays4Bnz0bEkT9MA=
Subject key identifier: FB:A5:24:B5:F8:29:9B:8B:F2:07:31:C9:77:39:AB:C5:B2:00:5D:3F
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01974AB1A5C6B4AA6010C062DB4D1351D050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 14:00:45 +0000
Manifest this update: Sat 07 Jun 2025 14:00:45 +0000
Manifest next update: Sun 08 Jun 2025 14:00:45 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: dFeSHsf34xfGyvnfGrf6g1/vm/KPmWrEwKWUpSRygCY=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a5:c6:b4:aa:60:10:c0:62:db:4d:13:51:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jun 7 14:00:45 2025 GMT
Not After : Jun 8 14:00:45 2025 GMT
Subject: CN=fba524b5f8299b8bf20731c97739abc5b2005d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:af:f1:f5:9d:ba:6f:eb:bf:d1:f6:77:57:
0b:f4:3c:c7:63:0d:32:de:22:ff:12:d3:99:10:37:
39:b5:3f:7c:7a:48:99:c0:fe:e5:20:cb:6d:c7:bd:
e7:a8:c1:78:97:86:e1:47:21:35:db:29:21:06:d8:
27:a2:05:53:80:37:8d:ec:93:12:74:40:bf:83:c4:
84:10:50:c4:e3:e5:90:60:fe:cb:b4:37:a3:6c:2a:
d1:bf:88:fe:5f:7e:bb:56:4c:2e:b9:19:b8:e9:3c:
d3:af:e3:1f:b8:1d:b0:5c:91:e4:f4:80:29:f0:10:
20:9d:35:91:83:48:ad:28:81:57:8a:83:95:95:f2:
27:e8:20:ba:b9:b7:fb:16:9f:54:20:92:f8:45:d1:
a9:90:fd:09:53:93:2b:51:c2:0b:66:4c:d7:f6:e7:
5b:5b:b9:d9:04:e2:3d:7b:42:c3:3c:f9:bc:26:f4:
f7:a6:73:b6:39:ea:63:f3:6a:9b:39:fc:70:93:6e:
42:12:bb:89:d4:27:33:0f:49:0e:68:92:f7:07:0c:
2b:37:70:f0:17:80:fe:7d:d0:78:05:f3:e2:be:59:
72:c5:f2:01:42:2a:c7:3a:78:fa:90:b6:1b:8c:45:
0a:b3:d6:f5:26:2c:8d:7a:cd:69:d6:cf:1b:61:70:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:24:B5:F8:29:9B:8B:F2:07:31:C9:77:39:AB:C5:B2:00:5D:3F
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:7e:c7:f5:43:58:72:8a:68:10:9f:c0:b0:2a:cc:6e:d8:
d9:6f:5a:cd:11:f0:f8:82:a6:aa:16:8b:67:aa:1e:57:ec:e7:
51:89:37:18:99:d1:62:61:ef:ef:30:c3:ad:f4:ef:fb:71:44:
8e:8f:92:be:f0:5a:12:82:59:b7:c8:c1:15:52:c5:2b:bb:fa:
1b:c0:45:f9:20:82:aa:09:01:9b:70:7b:3b:a8:3d:71:65:c9:
fc:f5:44:2c:99:17:63:1b:cc:6e:36:4c:d5:81:58:62:75:70:
38:04:4a:cf:b1:47:66:df:06:83:f6:af:7a:74:e1:3e:68:e9:
93:34:fc:85:fe:98:7a:b0:27:97:db:04:d9:47:49:c6:d1:d4:
d5:22:15:1f:30:07:e6:ab:c2:e2:86:81:25:d9:57:99:0d:31:
33:01:37:1c:43:80:f7:4c:e6:fb:12:b2:31:c2:fd:dd:40:ee:
a9:35:c4:f8:78:fa:e8:9a:67:ba:5b:2c:ea:60:aa:d1:0a:d2:
ed:fa:9a:c5:f6:22:b3:ac:d5:37:18:4d:ac:3c:ac:09:ad:de:
63:ff:85:03:75:77:bb:b7:8e:70:0e:a1:cc:cd:c5:a7:35:75:
a9:f5:40:04:f6:2e:6f:6e:19:bb:4e:7c:a4:9b:1a:40:25:31:
43:10:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:39 2025 by rpki-client