Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: T60qTeMISf4zsekcKE4AgBs90SIzgmhGVPmYlZCqLhU=
Subject key identifier: CE:F9:C8:6F:45:64:82:53:FB:28:0B:7A:70:FA:BC:CF:B2:5C:A9:C7
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01975DCB471F7170F2293B655280F5F4B7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0665
Signing time: Wed 11 Jun 2025 07:01:32 +0000
Manifest this update: Wed 11 Jun 2025 07:01:32 +0000
Manifest next update: Thu 12 Jun 2025 07:01:32 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 4SYRHot5XabodaRxDPtdZp4I9eKW5fdyAQyeXwVlFIc=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:47:1f:71:70:f2:29:3b:65:52:80:f5:f4:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jun 11 07:01:32 2025 GMT
Not After : Jun 12 07:01:32 2025 GMT
Subject: CN=cef9c86f45648253fb280b7a70fabccfb25ca9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:f9:45:2f:22:7f:51:d7:38:28:02:86:0c:
37:af:86:ee:2e:7b:ed:9e:21:a7:ca:df:91:ea:9c:
c6:14:69:c8:1d:59:89:72:c1:dc:3c:7b:bc:38:85:
57:2b:fa:d3:b2:c7:f3:5f:af:0d:43:48:a5:47:00:
72:ab:32:0c:20:dd:25:4c:d4:09:07:c1:d5:d4:bb:
a9:55:84:24:f5:67:16:2c:27:bd:d3:85:c8:9d:80:
4f:8c:79:9f:7e:64:69:3f:93:8d:ad:db:04:56:89:
9b:3e:ca:7b:2b:af:0b:35:4e:e8:4e:0b:1f:d4:b0:
e9:3f:86:91:7a:8b:34:80:9e:21:7e:ab:02:a7:d0:
6d:58:3d:fe:96:13:60:a1:d3:13:43:5b:b1:15:5b:
86:2e:ea:63:39:2a:41:d7:55:bb:a1:12:f5:4c:e4:
bc:04:19:71:c6:8d:3d:3a:ac:15:e4:a8:62:73:16:
ae:77:84:ee:8a:e1:b8:4b:5b:a6:02:ab:25:be:da:
ed:62:65:1b:78:12:bd:ff:77:ac:1c:b6:4a:55:21:
3e:86:a7:e5:70:81:ea:60:8d:9f:a5:71:ac:a6:3c:
54:9a:2a:ad:19:6e:9d:02:69:1e:6d:aa:ff:e0:bc:
3c:17:9b:0d:20:5f:c6:f0:59:ed:c9:55:4a:e0:8a:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:C8:6F:45:64:82:53:FB:28:0B:7A:70:FA:BC:CF:B2:5C:A9:C7
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:02:a7:df:6c:67:3e:5e:ba:d5:a7:2c:02:22:6d:c2:db:
a2:10:fd:4f:73:9f:8c:2c:47:c5:14:ec:c0:8b:e0:e1:9d:e9:
de:bf:af:7c:43:8b:0a:82:f8:dd:ab:2d:aa:3f:fd:df:53:f5:
27:a7:d4:54:64:3c:58:b5:4b:54:01:4f:bb:81:a0:b3:13:67:
b2:64:57:89:69:fa:c4:cb:6a:a2:a6:dc:aa:06:23:43:6e:ba:
b9:90:5e:e2:05:26:01:8f:4d:cc:c0:38:fd:a4:df:37:a8:c5:
c1:82:0d:f4:39:be:2c:66:c9:41:3b:f5:d9:a9:a7:c9:f0:33:
29:55:97:5c:8b:7d:bb:6c:6e:40:41:47:fc:47:32:ed:d1:80:
fa:d4:34:97:9c:28:53:f8:37:bd:bc:7d:b0:08:ff:be:22:7e:
57:82:d6:54:27:b8:9f:84:ea:b4:3d:ad:f9:0b:2d:85:85:62:
de:87:ec:c7:19:b3:1b:62:85:ba:1f:99:2b:aa:7f:61:90:f5:
32:aa:8f:fc:2e:55:42:63:5c:55:1b:fe:80:83:b3:83:1d:d5:
c0:3e:72:30:63:44:4f:4e:77:25:6c:5e:71:28:f4:8a:f2:54:
6a:62:2f:78:50:d7:64:73:c1:5c:ed:e8:84:25:3e:9f:99:9e:
d5:d4:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:17:19 2025 by rpki-client