Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: qc3WVJatlSg/IijBjyi+083O2SQ01REtyHrhEsP5HNE=
Subject key identifier: 49:6E:73:00:67:B5:BA:C8:23:4A:E1:E3:E9:D0:F6:74:AD:AB:25:93
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 01974A43E28F3562253FFDA34CF89DF1117A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 03F1
Signing time: Sat 07 Jun 2025 12:00:52 +0000
Manifest this update: Sat 07 Jun 2025 12:00:52 +0000
Manifest next update: Sun 08 Jun 2025 12:00:52 +0000
Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: ZctI8H9Myp91XfAxm/aI4kooORyvvwjc0HX7s+ubtbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:e2:8f:35:62:25:3f:fd:a3:4c:f8:9d:f1:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Jun 7 12:00:52 2025 GMT
Not After : Jun 8 12:00:52 2025 GMT
Subject: CN=496e730067b5bac8234ae1e3e9d0f674adab2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:a2:ec:6b:08:6d:92:cc:37:23:00:b2:42:
73:8d:57:03:db:e4:88:0e:b3:d6:e3:b9:7b:0f:0d:
30:31:be:de:af:8e:9e:e2:90:ed:d7:46:23:32:a0:
b4:33:6e:6a:e4:84:63:c8:c3:4b:bb:24:29:9d:2f:
0a:e7:4b:e0:aa:55:b8:50:69:0c:74:f7:56:51:ba:
e4:21:84:cf:06:22:2c:5e:53:59:b1:b1:00:9c:9f:
0f:6b:51:9c:14:6e:fa:23:30:cd:47:1a:14:39:53:
26:ab:7c:bc:ef:ae:c7:e5:12:ef:79:ec:63:2d:47:
fe:f9:e7:94:49:e5:58:39:22:8a:78:99:ac:8c:81:
9d:a6:30:38:ac:b4:33:05:e6:1b:05:03:3c:a1:12:
d6:e4:ee:c9:e6:87:22:73:69:08:31:b9:15:54:b0:
8e:ef:49:10:62:d9:1e:b7:24:64:f3:e9:55:e9:78:
b0:40:97:ff:d2:92:f1:0d:cf:13:0e:cf:98:f8:12:
8d:74:b6:65:9b:f5:19:58:5a:7f:8a:43:5d:13:5a:
72:df:bf:bc:4a:aa:95:c0:30:a0:56:11:61:af:21:
25:e2:4e:fc:41:cb:d9:95:1e:3d:c7:3d:77:99:15:
b1:5f:ea:0a:4d:33:c3:42:c0:c9:a0:0d:84:74:97:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:73:00:67:B5:BA:C8:23:4A:E1:E3:E9:D0:F6:74:AD:AB:25:93
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:f7:ac:75:e9:f7:b4:88:8f:56:f2:ed:f5:20:15:aa:51:
7f:61:ed:94:33:c2:99:b0:74:a6:e9:75:a1:cf:44:36:a4:b5:
01:14:87:64:42:25:62:dd:39:9d:7b:e1:e5:d9:34:9a:63:4d:
62:1a:7c:85:35:87:5a:1b:e9:dd:9f:81:62:fc:6e:c8:8c:91:
b0:7a:2e:06:2e:87:cc:0c:35:e3:2b:8b:22:d0:3e:d1:90:07:
ff:68:b4:94:3c:db:32:d6:f8:69:10:61:9f:62:e9:b5:fc:79:
d2:c9:63:ae:d8:47:75:33:da:a9:b6:eb:ac:e0:bb:42:f7:ac:
e0:96:00:2b:bb:4e:ec:dc:db:73:29:9a:27:fa:06:3d:ab:74:
cc:85:15:0e:01:ca:56:dc:71:f2:03:6c:ed:ff:b9:a1:95:39:
5e:43:e0:4f:bc:c0:76:16:fe:a8:61:4d:09:9b:59:e9:94:66:
cd:83:8a:ec:d7:10:b6:7f:0c:58:cb:36:5c:1a:e1:b9:b0:81:
eb:be:1b:9e:cc:c4:95:71:34:81:fb:1a:94:02:8f:16:b9:79:
45:68:59:c6:60:bb:d8:8e:57:a5:a5:75:56:46:20:d7:bf:ed:
96:33:46:9b:7e:70:43:09:d2:d2:f3:43:f5:fe:b4:f8:2b:30:
40:fd:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:06 2025 by rpki-client