Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File: a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier: Jowf5cLN+BoYgBtvhtHipRC7+Y0K1MR52jdRI5vbT7I=
Subject key identifier: 27:49:8E:27:95:9B:79:FB:97:33:93:23:80:62:96:09:F2:D3:57:59
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial: 019768175C745F0B2EAE159F9DB99537CDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number: 0F04
Signing time: Fri 13 Jun 2025 07:00:50 +0000
Manifest this update: Fri 13 Jun 2025 07:00:50 +0000
Manifest next update: Sat 14 Jun 2025 07:00:50 +0000
Files and hashes: 1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: QC8tOTrlJqJ0zAM5zdWdtPB+0JnYCyTEzvwoYTFspUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:5c:74:5f:0b:2e:ae:15:9f:9d:b9:95:37:cd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Validity
Not Before: Jun 13 07:00:50 2025 GMT
Not After : Jun 14 07:00:50 2025 GMT
Subject: CN=27498e27959b79fb9733932380629609f2d35759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:b7:48:af:f9:3f:9a:b9:b5:7c:fb:f9:51:
47:f2:a8:1a:20:4e:a7:28:ad:a6:6a:b7:4b:c7:6c:
28:b7:09:13:16:6a:48:96:3a:40:05:a1:29:99:2d:
44:41:b1:d6:81:c2:90:47:ee:ee:bc:48:e8:ea:ed:
4b:32:eb:33:e2:3d:0e:4d:b3:db:a8:42:63:7c:62:
9b:54:09:a8:bb:ca:e2:87:d9:8f:3d:a4:a8:a8:c4:
6c:d9:15:98:e5:4c:33:07:10:ec:1a:7b:b4:22:b4:
11:d7:40:62:a2:05:be:dd:55:ce:4f:24:f3:d8:bd:
68:54:b0:c0:a0:a2:63:51:4a:ad:d6:77:67:5f:b9:
7c:37:76:b3:05:b4:72:f0:89:50:29:23:2e:a8:49:
c5:4d:b2:67:30:bc:58:9d:43:30:90:94:89:9f:e3:
37:a4:22:71:3c:1d:c7:83:00:75:2b:14:c2:57:ec:
4c:a3:8d:72:18:d8:b2:33:4c:6e:8d:66:00:63:77:
62:5e:29:1d:37:8c:d8:86:70:2e:fc:14:d0:1b:5f:
9e:fe:48:8f:fd:ac:79:d9:c6:a8:4f:42:ea:ae:a4:
78:69:62:95:b1:28:36:5e:e4:5a:62:f2:5c:51:6b:
43:2c:a4:80:80:2f:23:fc:65:59:69:d0:c6:23:d6:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:8E:27:95:9B:79:FB:97:33:93:23:80:62:96:09:F2:D3:57:59
X509v3 Authority Key Identifier:
keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:06:8a:31:65:34:7b:83:42:20:6a:2d:06:f9:55:03:b1:
fd:df:29:cb:9d:20:0b:2b:45:11:de:f7:99:dd:77:12:5a:fd:
08:54:e6:c5:2b:88:67:77:c5:30:9e:48:b2:4f:51:8d:8a:ef:
ed:e9:ce:d9:ce:c8:9b:fe:26:e4:48:c4:d7:1c:32:3a:7f:ce:
3c:c6:61:77:c3:e6:db:d6:78:9b:00:82:fb:06:ab:4c:dd:24:
09:a4:8a:c4:cb:5e:3e:be:50:19:55:29:aa:21:30:75:34:19:
fc:c1:57:ad:a0:a8:a8:c3:d0:a4:1a:8b:d2:06:ab:c1:09:df:
e1:9f:9d:20:68:48:39:91:c2:0c:8f:eb:cb:67:03:55:65:38:
e6:77:9f:02:82:36:b2:ba:8b:1b:7e:c2:0b:bf:70:75:8e:5a:
4d:66:eb:f7:a0:96:a3:35:5c:7b:6d:14:a6:20:83:26:91:78:
83:32:9f:91:2b:e2:91:60:eb:2b:51:87:5d:d6:4d:22:ce:85:
04:b1:ce:e8:14:18:3b:35:a2:82:ad:02:ab:3d:a3:2b:a8:18:
0c:61:35:1a:85:f0:1d:3a:31:7f:99:12:74:64:62:a3:76:40:
a5:ef:b1:a1:e5:13:9b:9c:c9:b0:20:ab:6e:8b:82:b5:36:02:
0b:fc:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:58:57 2025 by rpki-client