Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: FXg/M14Dz6VYszp7rQVO77M9Q/HhyjtN2TQhxKc+emg=
Subject key identifier: 30:AB:54:46:F3:AC:56:74:D5:38:44:85:E8:39:E6:7C:25:79:C3:4D
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019748FA275C2738E10C7DE81FECBA883E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: A6A8DtKVaquJQAorTenTdv+YltqVJd2WccMdkn1xEaA=)
3: yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa (hash: YWCevYeGrsDTRNW9HGKxCubEWRJxVpXV1huOUXJtDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:27:5c:27:38:e1:0c:7d:e8:1f:ec:ba:88:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=30ab5446f3ac5674d5384485e839e67c2579c34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:c9:67:02:af:8e:6c:b8:0a:60:70:23:90:
ce:c9:89:c0:ef:af:51:f5:61:db:ff:38:5f:fb:c9:
c2:b2:f6:ad:35:ae:6d:d4:ce:d0:d3:35:d5:be:1e:
9f:f0:be:dc:83:43:f4:03:de:c2:75:e1:8e:fa:1c:
b9:49:00:06:d5:a7:5c:7a:c5:5b:fb:a4:dc:31:4c:
96:c9:a8:f3:3e:40:97:6a:2d:41:2d:d0:89:b9:84:
9a:d2:7b:4c:cb:20:a1:53:d8:42:c6:41:53:84:19:
16:71:e4:58:95:9c:28:15:4d:fe:c4:0d:92:ac:b3:
83:97:53:38:bd:0b:24:64:83:a3:b4:bb:16:59:e8:
29:04:0a:81:a0:af:51:83:ea:98:3f:a9:fd:b1:a9:
c5:04:78:d5:26:e6:a0:3b:84:7d:f4:9d:50:e5:87:
a1:3c:47:e5:c3:92:06:13:82:0c:2a:9f:1b:a3:b9:
00:9f:6e:b8:61:29:d3:60:dc:43:b2:bf:9d:e0:7d:
35:6a:60:8b:5a:e6:28:03:e2:42:07:71:7e:81:b5:
d9:e0:0f:d2:5c:e8:7c:89:d6:92:b6:29:c0:17:7f:
64:01:4b:35:af:91:fc:9f:54:5f:03:78:7d:80:a2:
c8:da:ac:e8:68:53:38:f8:6a:d5:7c:2c:dc:06:b1:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:54:46:F3:AC:56:74:D5:38:44:85:E8:39:E6:7C:25:79:C3:4D
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4c:b4:6b:e6:52:70:35:65:29:f9:cf:d8:da:a6:fd:64:83:
f5:d6:c1:44:86:57:23:0a:d0:ce:6b:2b:b7:61:c4:68:82:3d:
c1:f7:55:6c:85:29:a7:c1:b9:4f:3d:57:7b:1a:9d:a3:a0:72:
63:17:ed:c4:5a:0d:9f:d2:85:52:ca:a2:3e:c4:2d:68:d6:13:
95:c4:27:e4:16:62:5a:13:84:33:02:3d:c2:14:5c:7a:92:b0:
fa:bf:27:9d:df:b1:7a:5a:ba:04:93:84:ea:fa:d0:01:3e:0c:
da:fe:64:f6:5b:36:4c:54:ae:d9:5e:39:30:87:d1:f2:f2:14:
8b:80:23:7f:50:5a:d2:b1:96:6c:2b:48:cd:6a:71:1b:62:5b:
c3:74:b0:39:99:d9:7c:0c:dd:48:fc:5b:c5:b6:82:57:86:7a:
7e:b3:09:36:32:d4:42:4d:06:e5:86:d9:26:af:6e:d2:21:cd:
e6:11:85:b5:ce:8a:81:ce:3a:18:12:0f:08:40:10:70:1e:0a:
f2:83:ce:83:ec:c5:68:8b:ac:d5:fa:a3:43:bf:1c:d0:da:cc:
a7:54:b1:55:72:33:12:ef:5c:4e:f2:ab:f6:1d:81:20:c6:8d:
f8:71:f3:8a:40:79:26:81:74:2f:ed:2d:cb:9e:c9:22:50:34:
67:8c:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:29 2025 by rpki-client