Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: df7YFQUf3djDv4Z6mri1LJdDLpLGzxxwaTaoHreKbn4=
Subject key identifier: 3C:9E:90:C0:E4:52:02:71:E7:B6:19:5D:89:08:D1:B1:44:3C:53:98
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 0197470BC65ECE5E7A97CE533223CA5BAF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 1056
Signing time: Fri 06 Jun 2025 21:00:43 +0000
Manifest this update: Fri 06 Jun 2025 21:00:43 +0000
Manifest next update: Sat 07 Jun 2025 21:00:43 +0000
Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: k92SiX2RsvJKuHb2UGWwYRe1wDOXFkeaz1Zo/r49UhA=)
2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c6:5e:ce:5e:7a:97:ce:53:32:23:ca:5b:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Jun 6 21:00:43 2025 GMT
Not After : Jun 7 21:00:43 2025 GMT
Subject: CN=3c9e90c0e4520271e7b6195d8908d1b1443c5398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:26:c9:54:ae:8b:a7:79:db:1f:a0:6f:c4:
82:2f:22:ff:d4:b0:5d:36:d8:dc:93:1f:37:1b:ec:
a8:cb:c3:b3:7e:14:91:d4:aa:51:c2:6c:12:fe:03:
ab:7d:13:b4:73:f0:c0:fc:47:4d:31:1c:f7:e5:75:
2e:b8:8a:85:9e:6f:c5:1b:ab:97:5f:05:2a:19:6b:
7b:4c:06:8a:2a:3e:82:3a:77:2c:ca:94:24:2a:12:
c9:00:ba:98:d0:da:c4:25:a8:23:c9:6c:80:61:82:
24:49:75:8f:7f:9b:84:c1:01:ab:53:ed:16:dd:e8:
e0:99:13:8a:58:dd:c3:8e:b0:53:8b:89:51:1f:31:
7d:6d:ca:2f:ad:5c:90:cd:ea:c9:b5:e8:de:06:de:
fd:da:9e:fc:6f:44:ef:f8:06:03:07:d1:8b:2f:18:
99:e1:96:1f:43:7c:97:7c:b4:78:99:73:50:6f:c2:
86:56:e2:3e:99:8b:d7:c3:e2:72:02:67:96:26:ba:
aa:1b:84:7b:4d:97:b9:e3:ed:92:c7:38:2b:f4:89:
5d:24:91:f1:e7:8e:6d:aa:d7:c8:53:2c:86:63:54:
52:b3:d6:b1:0e:ec:1f:eb:38:df:ca:d9:87:b2:b3:
dd:8b:db:18:d6:77:91:19:c1:af:36:2e:a4:c3:53:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:90:C0:E4:52:02:71:E7:B6:19:5D:89:08:D1:B1:44:3C:53:98
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:8a:0d:94:63:45:09:02:a3:7b:1d:7a:b2:d2:1c:9b:45:
c5:31:5b:8f:da:21:50:68:cf:7a:8e:20:80:27:70:73:72:95:
8c:b0:81:58:2f:5d:05:33:48:d0:79:27:7a:b5:0d:c6:21:dc:
2e:ba:c2:e5:cf:83:32:e5:1c:b2:21:c7:38:ee:94:2b:2d:8f:
e8:51:3a:03:19:99:42:65:0e:de:b2:b0:6a:76:82:c3:3e:12:
93:ce:03:3f:ff:ac:3e:2d:f1:53:db:7d:d5:2e:7f:87:e1:9a:
08:56:e6:b9:12:e6:75:75:45:03:53:c0:93:a1:0a:5b:57:7d:
62:08:01:10:2c:f4:f8:e0:97:1a:7f:0e:e8:94:96:9a:04:72:
fb:9a:95:a1:83:90:aa:c9:18:fb:7e:fe:f1:b1:93:14:ff:13:
70:43:05:c6:28:80:2f:cd:d2:3d:7d:e6:af:2f:91:12:c8:76:
cf:b1:be:2e:d2:87:7c:b8:03:84:6a:ce:d8:64:74:22:56:4d:
c3:c5:d2:fb:fc:8b:92:3c:9e:53:5a:11:1a:ac:fd:5f:41:cd:
07:a7:57:d9:40:4f:91:ae:9d:c2:15:a0:24:fa:f7:ed:28:ee:
8f:09:1f:75:9c:f4:4a:9c:87:48:8d:3f:95:ce:25:75:4b:96:
2c:fa:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:31 2025 by rpki-client