Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: PeKQOCH90z4aWmzGOykZjyKW+b7u0zF3x7IETW/VbgQ=
Subject key identifier: 52:DE:27:80:43:7F:05:CB:12:94:F1:3C:C8:77:1E:5D:6D:D9:12:C9
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01974EC5BF1E3A9B7A44DAE49D1BDA8827E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 014F
Signing time: Sun 08 Jun 2025 09:01:11 +0000
Manifest this update: Sun 08 Jun 2025 09:01:11 +0000
Manifest next update: Mon 09 Jun 2025 09:01:11 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: 3OnA49jEq2FOz3wg2Lxt8LqfkuJIWI/yOyxGhSmmPyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:bf:1e:3a:9b:7a:44:da:e4:9d:1b:da:88:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Jun 8 09:01:11 2025 GMT
Not After : Jun 9 09:01:11 2025 GMT
Subject: CN=52de2780437f05cb1294f13cc8771e5d6dd912c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:01:21:1f:97:df:da:4a:b6:1f:c7:fd:5e:
e2:30:40:e1:7e:df:8e:af:19:9b:d8:69:9f:e7:a3:
05:08:fc:e9:2d:d6:f1:59:c0:d5:d3:9b:9a:5f:f2:
4c:cf:43:1a:bb:aa:fc:f3:78:c3:08:b8:a7:92:55:
ef:2d:24:bb:8e:df:bd:fd:6c:9a:c6:5d:52:f6:52:
59:4d:6a:20:4e:1a:17:97:75:4a:f5:73:1b:37:c5:
3c:11:6e:44:09:e0:f3:73:38:6f:78:7a:56:7e:a1:
f7:6d:9d:b8:de:47:5b:2b:a9:f7:9d:25:36:f2:71:
55:43:3d:83:2c:f5:c9:8c:bc:eb:eb:ce:e7:38:53:
c9:0c:d8:a0:ac:9f:ae:1b:06:11:e1:cc:9c:bb:ab:
03:ef:1f:19:46:01:f7:88:0e:2e:54:09:cc:79:bf:
ec:ae:f2:84:30:25:19:64:6d:7f:a1:09:2a:5a:d8:
94:65:a1:10:c0:29:56:53:0e:3c:99:62:36:ab:4e:
3c:30:f6:56:3e:8d:9c:02:3f:4a:a9:a8:3e:2c:6b:
7e:44:93:d8:25:fd:71:39:fd:8e:e1:3f:c5:4f:ed:
0d:38:60:4e:ad:de:9f:fa:11:1e:16:da:86:3b:0b:
56:7a:31:44:17:2e:52:80:20:2b:83:dc:90:05:56:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:27:80:43:7F:05:CB:12:94:F1:3C:C8:77:1E:5D:6D:D9:12:C9
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:f6:06:52:99:c8:5a:0f:ef:17:d2:af:54:bd:91:64:8b:
a1:3e:d0:4d:a8:63:88:62:b7:02:94:13:37:98:ac:aa:20:ba:
df:3a:d6:32:ab:37:9e:96:8c:5d:86:be:c3:96:b8:5f:9d:03:
09:c3:db:50:4a:a6:37:7d:a5:2f:4e:d6:92:33:80:e6:f2:7a:
b1:42:a8:dc:42:21:36:7e:66:57:bb:fc:4d:8c:b1:de:0f:52:
22:f1:c6:7b:fe:4c:56:52:2a:32:b3:31:10:19:a7:7d:35:d5:
13:99:96:ae:66:9f:6e:d6:48:6b:e2:7f:ad:9c:a6:dc:a5:da:
54:83:1d:0a:b8:d5:57:35:43:55:e9:34:7e:9f:4f:46:be:c1:
7c:96:7f:45:9c:10:13:22:4a:3e:a6:87:df:e2:c9:ec:3d:cc:
11:f3:e7:cb:eb:a8:42:e5:d7:f2:c1:17:7d:7f:26:94:66:d7:
89:42:5d:8a:3e:ad:f3:67:89:2a:ee:8e:30:aa:58:d2:2b:67:
18:85:fe:24:05:a3:d5:9a:4b:8b:1c:37:ab:06:91:cb:45:5c:
3c:64:82:54:17:32:13:74:d8:54:c2:3e:61:d2:03:c5:5e:6c:
9a:75:c9:be:2b:05:f5:68:b2:91:18:99:cc:fc:5b:7e:a9:3f:
77:6c:e8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:28:32 2025 by rpki-client