Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: 4BLTbrQUfvN/vRwAc9rm73CbrrWn81DCk5D4uWluzX4=
Subject key identifier: E6:CC:95:F2:6B:C6:24:F9:A3:AC:8A:13:D7:63:BF:54:53:87:AB:4E
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019750EAE788A88401D9CB71E98DD3329FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 1185
Signing time: Sun 08 Jun 2025 19:01:01 +0000
Manifest this update: Sun 08 Jun 2025 19:01:01 +0000
Manifest next update: Mon 09 Jun 2025 19:01:01 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 7sU/QOlcioTYRqDw9OIlgHYJZqG5xpg+SPN74YHHWCk=)
2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:e7:88:a8:84:01:d9:cb:71:e9:8d:d3:32:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Jun 8 19:01:01 2025 GMT
Not After : Jun 9 19:01:01 2025 GMT
Subject: CN=e6cc95f26bc624f9a3ac8a13d763bf545387ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:9b:c7:ae:95:94:e7:ef:e8:c9:85:ef:2a:
3c:35:45:a9:ea:7d:fc:05:0c:fc:a7:49:92:9b:64:
29:06:b1:7d:ae:60:b4:b2:5d:52:f8:d3:d6:e4:2e:
e8:9d:8d:a9:fa:23:ca:35:73:00:1a:48:29:b9:7e:
d8:53:29:28:23:4e:3f:f7:72:50:9f:e5:96:79:40:
6a:8d:08:b5:69:8d:4b:32:9a:46:63:94:de:e3:73:
0b:ea:b3:31:e4:6e:56:3b:6c:3e:7e:9e:68:07:b2:
9e:2e:17:c2:fe:12:78:ca:4f:11:e3:ba:82:9f:f7:
84:04:c2:a9:65:94:7f:00:52:0a:a9:99:53:aa:c8:
8c:89:cc:36:71:22:1a:e9:77:f4:17:da:fc:40:e1:
07:f1:8c:5c:6f:06:ad:a3:03:b5:dc:27:e9:a6:4e:
77:ac:ef:0d:cb:bc:5d:36:b1:94:85:53:6e:b8:83:
bd:cc:cb:b9:c1:c2:f0:ac:2b:49:06:10:83:ec:1a:
62:88:7b:95:26:27:cf:ed:5f:9a:f0:84:82:72:5d:
e4:60:ce:ad:1f:a5:8c:04:f5:b6:91:0b:e6:d1:91:
38:dc:1f:cd:c4:66:d0:19:69:b0:d3:a4:12:8f:f3:
d0:e7:9a:55:0e:ac:b2:71:9a:f3:97:2b:55:1a:a9:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:95:F2:6B:C6:24:F9:A3:AC:8A:13:D7:63:BF:54:53:87:AB:4E
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:eb:95:0f:6d:a9:3a:e9:3f:38:3d:36:96:0b:62:27:88:2a:
1a:c6:68:41:08:a6:55:c4:ba:98:fe:ba:18:ed:99:27:30:0a:
fe:14:33:30:94:ce:d5:08:a1:f7:73:a7:da:52:a5:41:3e:76:
88:1d:fe:8a:63:d4:c5:b5:2a:d2:93:ec:61:a7:03:0f:e6:05:
5b:69:cb:89:ad:b9:bd:60:a0:4b:d7:35:0c:71:50:a3:b8:9d:
a8:54:a5:f1:ef:5d:57:21:ef:80:5e:c0:a0:10:23:b4:ad:45:
7a:7f:9e:77:92:96:88:9e:54:5f:af:1d:f9:10:76:d4:4e:b0:
26:60:c6:e2:60:d1:48:00:df:53:8c:58:97:c3:a9:25:1c:86:
2e:7a:79:0b:e0:8e:88:87:36:4b:84:9c:10:52:89:27:77:c9:
73:53:90:5b:5b:fb:63:a7:8d:02:3f:7f:28:3f:20:d3:f1:b2:
65:37:37:66:0a:e4:ee:1d:f2:45:e1:e7:77:a6:51:98:b5:1b:
16:0f:ce:89:d2:86:41:14:d9:ff:92:05:07:5e:36:35:46:06:
72:f9:ef:8b:5d:32:95:67:56:f1:4b:60:cd:5b:c4:71:d2:86:
a1:ca:58:11:17:6d:c8:10:96:a2:f9:da:59:3d:b7:c8:5f:8f:
12:a5:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:26:04 2025 by rpki-client