Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: oT5hGzhmcluOoGZRNHJaQYH9j47GG+yp7Xg6bONfPKk=
Subject key identifier: C4:E0:EE:AF:44:85:8A:96:E5:9C:6C:53:00:67:F3:10:F9:9C:0B:63
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0197383DD5C0437DC15B1546A8981238E90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1576
Signing time: Wed 04 Jun 2025 00:01:05 +0000
Manifest this update: Wed 04 Jun 2025 00:01:05 +0000
Manifest next update: Thu 05 Jun 2025 00:01:05 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: iX8EQcz13OZbm4OHep/N5nP5QfE3criKdBuG6NCeURU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:3d:d5:c0:43:7d:c1:5b:15:46:a8:98:12:38:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jun 4 00:01:05 2025 GMT
Not After : Jun 5 00:01:05 2025 GMT
Subject: CN=c4e0eeaf44858a96e59c6c530067f310f99c0b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:7a:3c:e8:02:39:b2:24:5b:9b:78:a3:44:
8f:61:d5:ab:f8:c6:3a:7b:b0:c9:cf:d6:fe:12:36:
33:ec:17:bd:63:12:ff:9a:9a:d3:ab:2a:dd:f0:cb:
96:bf:e0:ba:80:09:74:74:02:43:39:db:c5:8f:15:
0e:2c:95:ea:c4:03:6d:9e:8d:b0:5d:6c:80:d3:5b:
2e:5a:0b:f4:59:f9:64:e6:dc:f0:b7:06:62:9a:7c:
8d:3e:d4:7b:0d:08:80:37:3f:f9:71:63:84:a7:e0:
0d:b1:90:75:b4:c2:90:10:90:83:42:11:54:0f:14:
53:94:da:2c:05:e6:2d:0a:5d:cb:20:d8:2b:5d:6b:
cc:4b:32:b5:51:f7:e9:e2:73:54:bc:db:c1:87:e2:
90:56:a4:88:e5:79:cf:5e:b6:3e:9a:fe:6d:ab:53:
37:75:40:aa:91:3b:c5:84:60:14:b6:35:51:5a:e7:
67:b5:4e:f1:08:bb:d3:85:1a:74:6f:5d:1f:a4:14:
58:c4:2c:cf:d1:cd:dd:dd:3f:00:72:38:2d:34:15:
38:51:14:cb:da:5e:85:b5:a3:8d:a8:24:ef:e4:d5:
d1:04:d2:01:30:b7:0f:40:fa:9d:d6:b8:d6:9e:cb:
ee:8d:38:cb:36:a5:81:cb:b4:21:df:3d:4a:52:c9:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E0:EE:AF:44:85:8A:96:E5:9C:6C:53:00:67:F3:10:F9:9C:0B:63
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a6:d7:0f:83:70:52:a0:16:32:7d:43:fa:13:c2:c2:94:d3:
9d:31:7f:cd:52:f6:18:8f:48:1f:05:dc:ce:93:fd:9e:ad:c1:
0b:6e:f0:a0:82:ed:01:a4:e2:c1:e1:b4:aa:19:6c:5a:c1:73:
21:c1:16:0b:f3:ab:86:2c:a1:a1:d6:9a:38:07:b1:f9:13:37:
63:f4:82:e6:d5:14:09:7d:35:75:6d:37:87:d2:e5:e2:5a:9c:
c1:48:33:fe:30:4d:71:5c:11:95:f5:50:26:3a:84:05:19:5a:
4b:ba:9d:52:23:ec:71:c6:c3:8f:3e:02:7a:2f:45:08:1a:dd:
92:27:b5:bd:10:2a:ff:2f:4d:39:0b:70:86:9e:4c:ec:93:76:
37:9e:27:a6:3a:74:ba:42:02:2f:87:fb:d2:a8:b7:6a:2e:b3:
f9:b5:37:a6:ae:23:b1:82:91:1d:4b:72:05:1b:f3:89:9e:93:
08:cb:55:77:65:cd:59:ed:56:aa:00:96:d6:b0:ec:6b:28:f8:
62:d6:30:b7:0a:95:9b:da:d0:7a:6e:5f:97:62:e4:d3:e6:b0:
ec:bc:ba:21:c3:5b:a2:5d:90:7e:81:b0:9b:37:b7:7e:7f:9d:
a5:2e:34:51:b0:01:d7:7e:e6:5a:4e:90:25:8a:6d:a6:20:d6:
50:1f:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:16 2025 by rpki-client