Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: M43tNzbCqCZPugqdmLwG/JEJHohNqFx7jqFzDso3f/M=
Subject key identifier: 78:34:27:D0:96:10:E1:5C:53:38:FF:86:C5:EE:42:12:51:CC:AB:99
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019750B37E988B4F0842A8D5AFAB7C5A60A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 18:00:29 +0000
Manifest this update: Sun 08 Jun 2025 18:00:29 +0000
Manifest next update: Mon 09 Jun 2025 18:00:29 +0000
Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: O/QqLw2z554oY4T544UVVoPCnjuB52gpUaTa/dqyBY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:7e:98:8b:4f:08:42:a8:d5:af:ab:7c:5a:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jun 8 18:00:29 2025 GMT
Not After : Jun 9 18:00:29 2025 GMT
Subject: CN=783427d09610e15c5338ff86c5ee421251ccab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:6e:e5:b3:a5:12:8b:a5:57:12:fe:0a:7a:
51:9e:e4:5a:be:3f:49:85:8b:b0:5c:74:04:22:ac:
69:04:c3:9a:35:86:3d:59:d5:5e:87:7b:45:6c:1a:
e7:46:c6:06:5b:6c:ac:5d:8e:da:eb:d6:65:a6:48:
71:07:30:7a:46:d2:30:1f:e5:6c:05:3c:60:40:7b:
3f:7f:7a:95:7a:11:52:be:66:ef:12:e1:36:fa:b0:
97:77:0d:fe:d1:5e:8d:73:19:e4:6e:7a:d8:0a:9f:
b0:71:09:a6:66:d5:e3:c1:14:67:33:3f:d7:44:c9:
2a:49:18:45:22:09:a0:31:f1:b0:73:26:4a:b7:41:
6c:52:8b:ac:9e:08:61:9b:17:9b:41:74:c8:f1:2a:
ed:88:c3:42:9a:70:26:93:93:b3:e2:56:00:93:4f:
7b:14:ad:a9:60:c1:83:cb:62:29:97:e7:94:f4:b3:
d8:68:75:d2:73:b8:54:21:16:87:42:c6:e7:fb:46:
b2:31:37:84:b4:3d:a3:81:62:19:66:4f:27:57:be:
d2:ba:7d:ad:b0:50:fc:4e:ae:02:54:65:f3:0d:5e:
c5:d2:08:06:c6:e2:52:6f:40:74:8b:bd:f4:4b:c2:
0c:65:e3:0c:04:c6:d1:38:93:47:7c:82:c0:69:dc:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:27:D0:96:10:E1:5C:53:38:FF:86:C5:EE:42:12:51:CC:AB:99
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:33:a0:82:bb:23:5f:4e:44:bc:86:72:a2:98:01:a1:52:e1:
94:da:1e:56:1e:93:63:bf:9d:3f:7d:73:36:d2:73:cd:ee:f8:
11:a6:c8:81:55:cd:05:a0:02:86:55:a8:33:90:de:0c:a2:cc:
12:80:db:08:6c:b4:c9:d2:2e:be:2d:4c:d4:83:59:7b:2f:c2:
5c:3c:aa:49:f2:3b:0c:d9:56:f0:a2:65:6f:9e:84:b9:9e:60:
46:2f:a3:97:41:51:a0:78:dd:86:b7:97:ce:d8:50:38:b3:91:
02:75:a4:96:ab:82:95:06:82:cc:7a:84:bf:28:34:11:10:58:
1d:b3:29:54:51:78:57:19:1e:a5:ad:15:79:e9:6d:18:f3:71:
66:fb:10:41:fe:9c:22:c5:44:0d:c9:72:77:8d:57:a1:56:6f:
7e:be:8f:c5:87:bf:eb:a2:63:9d:c4:33:f1:41:45:a0:53:4f:
5c:59:21:54:e9:38:9f:cc:3b:81:12:df:5e:d6:58:de:3c:7b:
bb:af:0a:5c:62:3d:27:3f:46:26:ba:02:cb:8b:ef:49:1f:60:
31:7e:89:f1:7e:af:21:92:29:87:a9:13:d9:d7:7c:6c:87:69:
f7:b4:c9:1a:07:9f:af:64:19:22:73:e8:02:60:e1:61:96:09:
26:93:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:56 2025 by rpki-client