Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: w0f1IFcf9lfp/a2zAylvO2QsmFYV3U6eIG113QrlhZU=
Subject key identifier: 90:4A:6C:2D:EA:43:88:FA:54:35:23:81:11:F4:AB:BB:88:55:5E:EF
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01976396B86CE738A716C2A7D3772EA2C8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0668
Signing time: Thu 12 Jun 2025 10:01:51 +0000
Manifest this update: Thu 12 Jun 2025 10:01:51 +0000
Manifest next update: Fri 13 Jun 2025 10:01:51 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: RcmIbZMLm+0Jcpv8oXbu6SUFARr8P2JBgWbJPi3//sk=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:b8:6c:e7:38:a7:16:c2:a7:d3:77:2e:a2:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jun 12 10:01:51 2025 GMT
Not After : Jun 13 10:01:51 2025 GMT
Subject: CN=904a6c2dea4388fa5435238111f4abbb88555eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:0a:b2:e2:a4:1d:95:e0:5b:97:f9:fa:08:
45:a3:7c:3b:cc:d0:8b:80:9c:33:bc:54:7d:63:64:
a4:aa:25:cd:d1:99:88:7d:6b:0b:63:d4:56:24:69:
b4:a4:c4:50:5f:81:c7:c2:00:2f:1e:35:db:1b:d0:
2e:75:9d:69:cf:b7:90:85:d9:04:dd:3d:28:2e:7e:
7d:3f:cc:83:d0:c7:08:25:10:59:c4:3a:e3:4d:ab:
7f:71:a8:ce:ff:bf:d3:31:b2:10:6a:e1:07:8a:cc:
71:af:65:0e:f7:e6:82:3b:2b:93:53:60:5d:c5:1d:
1e:8f:79:b6:26:3b:38:b4:46:de:46:56:2d:f8:6d:
bc:c2:80:a0:a3:4d:62:51:67:97:9f:ea:29:d5:21:
56:3a:89:0e:af:0b:a6:bd:f2:fb:e6:68:d8:07:c0:
59:ef:7b:1e:6b:6d:1c:8e:9d:e7:9e:89:9c:58:d3:
61:e3:b8:67:66:35:10:59:c3:23:0c:99:91:e4:e4:
21:db:df:2b:4c:ac:ff:4a:59:52:3e:58:95:93:29:
d9:b8:50:b3:d7:4e:d6:80:fc:6d:fc:95:37:c7:8c:
74:8f:0e:4c:37:0d:2d:d2:f8:bb:40:59:c7:77:db:
04:c0:4e:3a:f8:a6:c5:ff:c7:9f:55:68:28:e2:66:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:6C:2D:EA:43:88:FA:54:35:23:81:11:F4:AB:BB:88:55:5E:EF
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:f5:77:fe:ee:31:63:52:10:b1:f3:07:c5:2a:3f:1b:37:
66:3a:86:55:e3:8b:8a:71:31:d5:92:4d:61:41:9a:89:ab:e9:
b9:c5:ed:d4:63:5c:78:32:05:46:02:4a:15:59:c4:74:09:0e:
a8:0d:56:33:fe:4d:4d:02:e9:b6:44:ae:ec:99:8e:93:d3:e4:
7e:65:c7:f0:df:f2:2d:0e:80:3f:4d:e5:2c:d2:2b:7c:d8:3f:
bd:4c:26:2d:23:7e:09:e3:0e:1e:87:70:60:34:db:dd:bf:2d:
fd:32:c1:b1:19:58:80:39:85:94:fc:25:48:d2:d7:06:bb:c5:
55:e5:87:a8:a2:c6:76:f5:87:ac:5f:9f:10:f2:2b:80:98:c4:
aa:e8:e7:17:d2:cc:ac:d7:a8:91:3e:a8:08:94:a3:e6:6d:52:
e6:b0:95:00:6d:06:43:01:6c:e2:14:4b:3f:a4:42:ad:a5:dd:
c3:47:a7:da:18:cf:3c:10:3a:16:d0:4a:94:6e:b4:e8:20:ee:
62:01:89:95:ba:2d:48:d1:8b:84:25:b8:e5:54:5c:3e:c3:fb:
53:42:3f:09:ae:7d:43:da:03:7b:6a:6d:00:1d:6e:10:19:77:
28:4e:61:ad:44:74:2b:7d:94:d9:0e:3d:90:df:89:cc:45:44:
55:8f:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:06:32 2025 by rpki-client