Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: JC7ekQwgchpN7DW8DhsMazNfOMpG82D+Vv9TFK4Pt7Y=
Subject key identifier: CB:86:3F:71:23:8A:12:83:41:38:14:55:55:43:C1:21:E5:FF:F1:4B
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0197499ED34B93B9A319CBE51DA049A6E267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0694
Signing time: Sat 07 Jun 2025 09:00:34 +0000
Manifest this update: Sat 07 Jun 2025 09:00:34 +0000
Manifest next update: Sun 08 Jun 2025 09:00:34 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: buxGLFh0/1/TFDaWWIjUKT2zZt3/4Kw6DTms9NJ05Gs=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d3:4b:93:b9:a3:19:cb:e5:1d:a0:49:a6:e2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jun 7 09:00:34 2025 GMT
Not After : Jun 8 09:00:34 2025 GMT
Subject: CN=cb863f71238a1283413814555543c121e5fff14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:99:e1:d8:39:ab:3f:51:26:b3:f3:ca:f2:
19:7c:0e:14:93:ef:f6:9e:a8:56:82:26:b8:0f:2b:
8b:d0:65:01:9c:a3:78:39:77:19:f0:5f:32:b2:24:
89:d1:f4:f0:ed:5a:15:ff:7d:31:78:61:d6:ab:14:
cc:e9:fa:92:42:3d:c0:bb:89:29:55:73:ae:bf:ab:
d2:9e:82:79:cb:1a:45:4f:e7:e4:78:84:60:78:94:
f7:a0:e9:36:dd:b1:58:01:89:71:9d:96:37:00:b8:
42:0c:4b:f9:c8:3e:61:ff:f8:ef:e9:8b:dd:97:da:
0e:42:fc:25:91:d2:e4:ae:f3:26:b7:c2:cf:9a:66:
22:42:8c:b9:c0:2a:d7:fb:06:16:4e:df:27:19:f4:
19:bb:b9:cb:6f:af:bf:52:6c:67:66:d3:14:78:85:
cb:9a:b9:19:73:c1:df:9f:97:4b:30:40:a5:9e:0e:
d7:71:d6:ed:32:ab:ed:da:43:4e:4d:93:30:0e:74:
c6:07:5d:3a:74:14:6d:9b:b3:87:91:19:9e:6d:dc:
9c:f1:7b:20:86:6c:5c:c8:2a:36:15:28:44:b0:1d:
b7:a8:ed:de:b6:6b:54:be:0a:da:4e:46:d1:da:6a:
b6:51:98:1a:f1:bc:74:1b:a6:c3:c8:fc:4f:af:0a:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:86:3F:71:23:8A:12:83:41:38:14:55:55:43:C1:21:E5:FF:F1:4B
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:43:bb:a0:81:36:17:50:5a:66:2f:c5:5e:26:a5:ae:27:
23:16:fb:58:b4:2e:ca:84:e5:11:74:72:62:69:63:7f:ad:1d:
9e:59:d0:19:0f:ed:7d:6b:c0:6c:c6:17:1c:bc:5a:fa:6d:3d:
eb:2f:d1:66:3e:d7:79:bd:d7:35:05:08:e3:7c:b5:04:74:68:
fa:86:dc:61:51:19:73:4a:33:c6:25:e6:71:6d:57:f9:33:8c:
5a:09:5e:b2:d3:76:78:39:ea:a6:50:8c:0b:ca:06:ec:79:ea:
64:93:f0:77:18:38:2a:25:6d:07:5a:4d:e0:5a:13:45:dc:aa:
32:fc:00:b6:18:0a:af:d2:4f:e2:25:fd:dc:63:c8:06:02:f8:
8a:8b:57:6d:ba:f5:5d:84:0c:b6:0d:2c:5b:ab:7a:2e:f9:29:
e9:4a:ac:bd:8a:5f:57:25:d6:2e:44:03:ab:a1:d3:7c:72:af:
2f:2e:9d:46:87:d5:90:dd:8f:46:42:9b:90:42:95:bd:6b:dd:
bb:53:a3:8b:db:cb:f8:8c:04:83:6d:28:ce:c9:47:25:22:28:
d6:7d:53:3a:05:55:1d:80:ef:c5:fa:a1:2d:84:3d:94:a9:4c:
5f:b3:1f:92:1d:80:8f:96:1b:59:a0:37:c5:fb:84:02:17:03:
b2:16:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:24 2025 by rpki-client