Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: BC6Y6/gPjhQeQ5AliC2ozuqs/mPGJrkrs7GV9tZZnkE=
Subject key identifier: 9D:59:E2:39:3D:17:19:CC:7B:48:EE:46:EB:BA:C8:85:1A:36:F2:B2
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 01975DCB4583040263DDF4DBAF4BB6E09F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 07E6
Signing time: Wed 11 Jun 2025 07:01:32 +0000
Manifest this update: Wed 11 Jun 2025 07:01:32 +0000
Manifest next update: Thu 12 Jun 2025 07:01:32 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: +hBsM/ictT2B/VJmQi4bDMB1FK9hdtq3YacWaMukOxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:45:83:04:02:63:dd:f4:db:af:4b:b6:e0:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jun 11 07:01:32 2025 GMT
Not After : Jun 12 07:01:32 2025 GMT
Subject: CN=9d59e2393d1719cc7b48ee46ebbac8851a36f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:4d:12:89:88:2e:4f:75:ae:57:28:5f:5f:
47:f1:80:82:05:e2:ad:29:bb:b5:0b:46:61:c9:a4:
7a:73:5e:41:84:57:d1:8d:64:93:b5:de:40:40:9d:
67:ad:ed:e9:26:ff:30:35:26:cd:b5:3d:b6:1e:51:
f9:31:1c:64:cd:17:3b:32:86:d1:71:5d:29:1b:82:
ef:8d:f6:b9:05:bf:90:c6:9a:8c:02:9a:3e:46:ef:
0a:df:f4:27:9a:d6:77:30:b3:f6:04:f2:e5:81:1f:
77:41:67:d8:50:89:5a:84:ca:a3:1e:20:b4:be:5e:
02:39:20:de:da:8a:1e:4a:0d:7f:5c:84:7f:98:ab:
52:3a:72:e2:58:80:ac:fd:0e:2c:73:dc:f6:5b:99:
04:f0:47:31:95:98:aa:2b:09:b5:94:00:ac:1f:80:
37:7b:b1:30:48:19:7d:7e:71:bf:c4:f5:b8:b9:04:
ea:24:13:0e:93:29:d9:97:36:74:75:8d:19:d1:8f:
5d:bc:54:14:fb:93:55:4b:d7:f7:38:2d:a7:20:c4:
9a:2a:36:b1:27:09:c3:7a:05:4c:15:ee:5c:68:26:
4e:61:aa:14:62:9f:da:e6:53:50:a0:40:0c:e9:46:
db:22:d0:6d:4c:c7:23:64:c2:3b:9c:69:ea:da:52:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:59:E2:39:3D:17:19:CC:7B:48:EE:46:EB:BA:C8:85:1A:36:F2:B2
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:53:0c:f8:02:2c:ba:60:6c:55:d4:3a:9c:7a:5b:43:d4:
d1:4b:b9:17:5c:43:ff:95:ed:f1:46:23:40:8f:33:cd:31:83:
a3:ba:b7:9f:6f:41:00:09:c5:98:cd:e6:74:b9:48:d8:4e:68:
44:fc:5b:fb:ad:c5:e5:94:ad:31:57:1f:d2:d3:a7:51:b4:ac:
f6:57:0d:f7:d5:6b:81:72:9f:9b:03:ea:97:35:8c:d4:16:9e:
59:9e:a0:b8:30:6d:b9:ba:eb:0c:31:82:cf:5b:c6:d9:98:6a:
f7:62:72:a0:2e:78:f6:22:c8:5f:3e:5f:92:66:d4:9f:c3:30:
86:d8:7f:42:b1:e2:10:a6:4d:11:c5:a1:97:21:b3:7f:53:d9:
34:bb:b3:f2:4d:00:bc:cd:f9:63:07:96:35:da:27:90:73:27:
e7:c1:e3:77:e3:b8:32:42:d1:ef:39:9c:7f:0d:4c:5f:9a:6b:
ca:a5:61:9e:d6:4c:45:65:12:a5:91:c4:22:44:4b:02:41:bf:
1b:98:28:3b:fc:00:62:71:57:34:1a:cc:99:d5:f3:63:2b:2e:
da:55:a4:dd:a4:a7:db:bb:74:58:cb:9e:32:32:dd:ee:67:89:
54:4a:c1:3e:79:86:27:c0:aa:ce:80:55:da:18:7e:0a:e0:c6:
46:6f:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:57:54 2025 by rpki-client