Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: 2b5hPN1uuBPPTycmKsp7cxM7pAdgEMYu9EUU+Ykzefc=
Subject key identifier: E8:4A:5B:E7:06:7B:7F:18:EC:FC:A1:0B:09:57:74:FC:68:D4:B2:65
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01974DE9746EBAACE70DC6EC940A810DC49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0985
Signing time: Sun 08 Jun 2025 05:00:34 +0000
Manifest this update: Sun 08 Jun 2025 05:00:34 +0000
Manifest next update: Mon 09 Jun 2025 05:00:34 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: h9Sz+hL8rWt5unW56yeBB+P7pCRdpCZ1QvkONDQSgho=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:74:6e:ba:ac:e7:0d:c6:ec:94:0a:81:0d:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 8 05:00:34 2025 GMT
Not After : Jun 9 05:00:34 2025 GMT
Subject: CN=e84a5be7067b7f18ecfca10b095774fc68d4b265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:2c:8c:18:97:3e:09:ec:c9:30:76:f6:df:
67:ff:d1:95:22:90:d9:64:96:d7:95:da:8b:3f:a5:
95:38:c1:e4:2a:a4:12:c6:d6:47:09:40:53:60:8c:
84:db:29:00:b4:89:3d:a7:30:cf:38:3d:7f:93:b8:
73:03:49:ac:7e:be:65:e2:cb:a8:57:e2:a8:4a:ab:
fa:99:84:66:ee:69:83:ff:89:21:b8:cc:0e:39:7c:
27:c6:4f:ee:59:e8:8c:a0:f9:35:64:b1:b0:48:30:
2d:1e:67:ad:a8:19:32:30:74:d1:9d:d4:96:88:70:
f4:ed:31:99:9d:6b:84:40:66:63:c8:3d:96:e9:85:
f3:7c:73:e6:94:87:b5:54:4a:2a:f5:1a:1a:9e:7d:
79:de:36:67:4d:17:cd:63:09:8e:8e:f1:b8:2e:a7:
0d:b7:6f:fb:05:17:3f:ba:4c:03:48:bc:ac:77:33:
cd:d8:2f:a9:68:fc:6e:25:b3:a8:23:4e:9a:0a:09:
79:df:78:4e:9d:70:50:e5:13:5e:02:14:b4:f9:61:
cb:68:22:17:67:be:6e:08:97:e8:c6:a7:90:66:28:
fa:3e:47:5b:b4:b0:d5:45:76:25:e4:55:ee:d4:60:
8a:3a:ed:3f:1e:74:5a:43:e6:22:a9:49:ac:66:42:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:5B:E7:06:7B:7F:18:EC:FC:A1:0B:09:57:74:FC:68:D4:B2:65
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:c2:75:fb:ab:ab:82:9a:ca:23:18:54:7b:29:94:75:2f:
82:54:c5:d1:fb:4d:a2:28:07:e4:88:6b:d6:f9:7d:01:ec:ff:
ee:a5:0d:a7:08:a8:41:a7:e3:d5:ce:e8:86:65:56:fc:8e:a7:
45:ed:9e:7e:51:a1:52:3b:bd:70:6c:27:b0:c5:0c:6f:9c:5f:
0b:9c:13:6c:17:64:2a:93:9a:93:37:7d:ba:b8:8b:92:f0:06:
77:0d:dc:a8:21:17:45:0c:3b:18:48:f0:cb:39:aa:76:91:2d:
a3:82:96:00:99:b7:c5:2b:c1:8a:e7:b7:08:ea:ec:18:50:13:
da:67:59:4e:bb:9c:7b:10:08:23:1e:c4:31:35:98:45:fa:b9:
d3:a9:cd:1c:a3:77:05:26:c3:7f:48:99:07:83:d4:39:02:15:
e8:f3:bf:61:a0:cb:88:5b:81:ef:24:29:d6:a8:e3:c5:1a:b4:
43:20:6c:28:8b:47:d1:23:72:02:27:8a:96:2a:03:d5:18:4c:
75:de:d7:f7:c7:95:c8:04:26:29:02:cd:d0:10:87:98:5e:43:
da:e8:7b:16:2c:77:fd:33:c8:c8:05:f4:db:79:56:be:72:1b:
25:f3:02:cc:ee:12:b3:79:bf:01:30:12:26:8c:d8:1e:5c:bc:
a3:e0:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:47 2025 by rpki-client