Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: PpbrzevePSK6GIhm0NtnBMKR8XqhdUh0FcA+wMA+wGM=
Subject key identifier: D0:E0:D7:C7:31:C4:D2:79:04:F9:DB:22:3D:62:7D:52:DB:81:24:98
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 01974FA0B72714729A895BEDF86E5078612D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 13:00:22 +0000
Manifest this update: Sun 08 Jun 2025 13:00:22 +0000
Manifest next update: Mon 09 Jun 2025 13:00:22 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: O+gHLvajT2OEgBlPo/J973KqlKTLLEoT3jXtFmmDBEU=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:b7:27:14:72:9a:89:5b:ed:f8:6e:50:78:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jun 8 13:00:22 2025 GMT
Not After : Jun 9 13:00:22 2025 GMT
Subject: CN=d0e0d7c731c4d27904f9db223d627d52db812498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:00:76:12:13:9a:ba:06:b5:8d:48:e3:6f:
31:69:7d:5d:ba:d3:5b:98:25:5f:6b:c0:fd:4d:f6:
c5:9f:8b:ff:02:1c:8e:c4:ac:20:e4:13:c9:0e:83:
a0:0b:60:98:18:ff:96:e8:96:f9:38:9b:10:5a:25:
55:3a:1d:e0:b9:a9:1f:46:6e:89:1e:9d:12:4a:2e:
ff:8a:21:b6:2f:6a:83:0f:97:5e:80:42:73:61:30:
b9:c9:78:db:c4:56:3e:db:ba:67:b7:de:5b:4a:42:
79:4c:6c:3e:98:e7:dc:87:a4:fe:be:4c:8c:4c:d0:
c5:1d:c5:42:95:d7:0e:6f:79:46:ae:a7:7b:6b:50:
73:29:94:ad:ff:1e:14:59:57:9d:2a:d2:20:f1:19:
b4:22:d3:f2:4d:73:d6:02:39:8f:bb:a5:13:b1:cd:
db:fc:3f:ac:46:f7:e7:b7:43:91:44:ed:0f:dd:c2:
c9:da:b1:3c:6d:06:e3:ef:87:af:c8:df:5c:3f:6d:
d7:25:4d:50:28:4c:d4:12:0f:ff:71:24:85:ce:01:
6b:aa:b4:20:1b:11:df:f3:72:68:f9:4c:ce:61:71:
57:48:da:5b:ac:f6:1d:eb:ce:10:4c:42:c7:7e:2b:
06:0a:52:28:6f:6f:ca:5b:cb:ff:56:fe:94:58:f8:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E0:D7:C7:31:C4:D2:79:04:F9:DB:22:3D:62:7D:52:DB:81:24:98
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:79:50:de:3c:d9:6b:08:6a:83:33:5d:74:2b:b0:51:cd:4e:
8f:ae:6a:6e:40:d3:47:e3:8d:71:ae:17:43:c7:09:dd:64:1e:
e0:17:a8:19:c4:76:40:71:6f:f1:7c:78:10:2d:a5:d7:4b:c7:
39:cf:a4:53:f0:64:9f:26:cc:9c:9d:cd:14:4d:86:48:3a:3b:
cd:f2:42:71:cf:81:4f:79:02:96:b0:2a:f0:7c:51:a9:2a:cc:
ea:95:cb:34:49:22:cd:4b:c8:ce:a3:af:3a:48:09:60:d0:99:
1a:6c:8d:b3:b0:ee:98:d6:a7:97:f3:57:d2:9c:3d:b3:2f:b7:
94:f8:f1:49:ea:b3:06:19:33:34:2f:d4:e4:cd:5d:a8:ee:74:
b5:8f:2c:e6:7a:26:57:c8:4c:f6:4e:58:62:4c:c1:6a:35:42:
45:65:0f:9a:43:04:4e:5f:05:44:6e:1c:a0:80:49:dc:1e:f9:
22:86:74:f8:4e:6b:3f:ec:b1:38:91:ef:94:e7:e8:09:ab:1e:
a5:89:85:a7:fc:7b:a0:48:c2:ec:65:5c:0d:8a:1a:a5:3f:b3:
ef:90:c6:0d:d7:d4:e5:eb:ff:f7:56:ca:d3:92:b0:46:22:1f:
c6:30:71:73:c7:14:44:40:6e:7c:89:06:72:e8:00:cb:f7:1e:
50:4d:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:21 2025 by rpki-client