Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: gWoBz6teKO4d9cH71A16Y4ld9Q7A12SGj4y/KW82GYU=
Subject key identifier: E6:97:AC:F5:D1:80:9C:B1:50:26:13:9B:EE:67:D7:81:65:45:6E:C6
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019759EED6166B828F59DDBF5DD4E5221F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0663
Signing time: Tue 10 Jun 2025 13:01:53 +0000
Manifest this update: Tue 10 Jun 2025 13:01:53 +0000
Manifest next update: Wed 11 Jun 2025 13:01:53 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: pKmMMCs9Er+maNgeQBI5X4qykS1/DJX1kAWH2hSl7xo=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:d6:16:6b:82:8f:59:dd:bf:5d:d4:e5:22:1f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jun 10 13:01:53 2025 GMT
Not After : Jun 11 13:01:53 2025 GMT
Subject: CN=e697acf5d1809cb15026139bee67d78165456ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:4f:b1:e9:10:91:99:71:8c:8d:65:a8:c6:
9b:3d:55:6c:69:5b:53:3d:13:3d:fc:98:11:74:6e:
15:a9:db:1d:fe:0a:b6:45:ab:f7:e5:1d:5a:27:67:
c4:d5:4a:30:3f:b0:23:0d:19:ce:d8:53:b4:1d:cf:
9f:a1:22:f1:5e:4d:34:00:69:72:98:8a:11:2e:c3:
21:64:2f:c9:df:a9:ca:2a:45:74:ac:37:d3:10:23:
32:fb:b3:05:75:b5:c1:34:fd:2b:66:da:cf:55:69:
fa:f1:7b:09:1f:05:77:cc:ad:6f:9b:e5:09:f1:41:
cd:59:a5:e3:68:e1:18:a5:48:14:d1:40:7a:b7:78:
5d:cc:eb:57:46:c8:7e:51:6c:10:5b:8f:30:e9:a5:
a9:e9:9f:e1:32:d6:e8:97:3d:c0:c7:e0:48:ee:fa:
2a:af:19:2d:1b:85:5f:c8:68:1b:43:d5:e5:cb:38:
fc:7d:99:95:f1:ca:91:6d:da:27:b7:5a:f5:f2:1d:
2e:d4:ad:a2:25:61:0e:23:db:7f:9b:d1:6f:f1:3a:
0e:68:44:28:dc:af:ee:88:d8:99:dc:ed:eb:92:4b:
79:b1:ce:a0:8d:ee:83:df:94:2f:d3:f5:95:dc:30:
a7:c3:0a:db:f3:b0:27:f2:67:a2:09:3c:fb:f2:a0:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:AC:F5:D1:80:9C:B1:50:26:13:9B:EE:67:D7:81:65:45:6E:C6
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:37:16:75:21:ae:ba:d8:f6:80:2a:37:a2:18:63:84:c6:43:
de:52:01:ec:9a:8c:67:65:b2:37:5a:c4:85:ab:e9:af:a3:e6:
42:16:ab:88:fd:a9:f1:9d:07:47:04:b8:d7:0a:6b:fd:1f:cb:
2b:3c:b6:fd:c4:3c:1c:b1:0f:86:9a:f4:e3:55:00:39:90:a1:
b8:c3:1c:d4:14:51:cf:b0:fa:41:db:49:f0:7d:2f:e6:50:54:
c8:b8:fe:2f:d3:c1:bb:a1:0b:c4:e7:18:89:21:08:30:98:01:
a6:4c:f0:96:99:6c:54:9e:9b:4e:69:3b:c2:da:e4:e1:59:84:
69:a2:f3:5a:6e:e8:0f:8f:d8:52:a2:26:17:34:2d:69:a1:d4:
76:a7:99:74:1e:9e:c5:43:28:83:23:2e:2b:ec:44:db:0f:9a:
7f:51:ec:dd:b1:20:91:2a:f6:ed:96:3f:81:71:97:d9:b5:f7:
ec:12:00:5f:c9:bf:5e:da:85:c9:83:d1:ad:9b:fb:03:c2:b5:
4e:f0:23:db:49:07:3b:74:1d:3d:86:65:d9:dd:e1:ba:e1:ed:
01:79:be:9a:99:fa:4e:6a:36:82:5e:3f:32:6d:10:94:e3:6d:
14:32:8d:58:71:a6:28:b5:b1:ab:79:21:b1:f0:2d:5f:74:f3:
c7:47:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:32:36 2025 by rpki-client