Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File: aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier: wR8VV35AbolyZPX2njecez4qZ2tNO9NKFT3mPv8srVw=
Subject key identifier: 44:1A:6D:D0:4A:35:13:21:31:23:12:8A:12:F8:F0:4E:01:7D:1C:4D
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial: 01974CD6DE9F8AC06356BD84905530C1064A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number: 04BB
Signing time: Sun 08 Jun 2025 00:00:39 +0000
Manifest this update: Sun 08 Jun 2025 00:00:39 +0000
Manifest next update: Mon 09 Jun 2025 00:00:39 +0000
Files and hashes: 1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: rRx8+sob9qkHSJK5bCa0XGTt9Qbe4d/u2gziaDjjgs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:de:9f:8a:c0:63:56:bd:84:90:55:30:c1:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Validity
Not Before: Jun 8 00:00:39 2025 GMT
Not After : Jun 9 00:00:39 2025 GMT
Subject: CN=441a6dd04a3513213123128a12f8f04e017d1c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:02:c6:e0:f3:f0:bf:43:c5:83:a5:58:20:
92:b3:a7:60:2a:c9:1c:d3:cc:aa:3c:91:9c:73:f3:
ec:12:aa:65:a7:cd:bf:3e:97:e4:28:2c:97:70:68:
6e:5d:05:95:19:2a:21:fa:31:11:43:69:a1:c3:9a:
0f:d4:7f:b0:52:5d:08:cd:00:89:00:c6:11:25:14:
a8:f1:5a:50:79:53:e8:cb:6d:fc:76:7c:41:17:f4:
3d:87:f2:7c:08:90:93:00:37:87:3d:70:bc:b0:61:
f4:bd:23:a7:89:f3:b9:ce:c8:74:e1:46:46:e8:3f:
2d:a6:af:0b:fc:b7:bb:d4:df:f8:68:b1:33:9a:27:
05:ca:9e:be:84:17:0e:12:af:2f:35:47:70:69:87:
65:e0:45:99:91:84:32:f0:d3:13:9d:1f:d2:c4:1c:
7b:b8:90:b0:fe:eb:ce:7f:67:d0:95:18:de:49:e8:
c3:a7:a1:0d:c6:7f:6d:2b:fe:c7:38:69:5f:fa:23:
73:fd:fc:28:67:92:f5:19:77:71:ad:42:2d:41:66:
2c:16:94:eb:0a:a4:32:23:e6:b2:5f:1d:3a:92:25:
6d:98:57:ea:49:2c:42:83:12:5a:f1:a6:cd:e1:0a:
04:a1:55:26:71:14:7d:04:5f:89:f8:e5:b7:1c:f9:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1A:6D:D0:4A:35:13:21:31:23:12:8A:12:F8:F0:4E:01:7D:1C:4D
X509v3 Authority Key Identifier:
keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:b2:d3:9e:52:89:69:56:bb:d0:df:dc:d1:eb:ac:dc:58:
51:42:bc:15:9c:28:4a:b2:38:22:10:0b:a0:b6:a0:17:9f:5f:
bf:01:c0:07:7d:78:74:09:42:af:a4:12:56:f3:3a:2a:59:a9:
90:bd:70:24:98:4e:23:bd:ca:e7:61:73:8f:d9:e6:ed:3f:55:
5d:0f:fd:6b:20:d1:de:64:f1:9f:6f:17:c3:0a:74:74:93:11:
8d:5e:67:3f:95:79:0c:7c:9b:30:d3:70:af:84:40:2a:35:44:
62:d4:0a:f4:8a:b9:af:e4:a4:29:7f:79:5b:c7:58:93:01:e1:
c0:a1:9b:1e:5c:92:47:7b:aa:64:a8:61:c9:e8:13:09:37:c0:
d3:8a:80:62:59:05:ab:c2:c1:de:56:f3:81:36:cb:f4:7c:af:
71:95:22:66:3e:44:44:e1:6d:0c:9f:94:b6:0e:d4:f1:52:03:
7d:96:16:a0:99:92:71:ab:67:c1:eb:b2:8f:ca:27:64:2f:8a:
c9:8b:75:12:74:d2:cb:3a:84:29:c6:7e:09:80:34:74:fe:b4:
ee:49:4d:4d:d6:80:d5:b5:a0:c9:91:fb:2a:a6:34:f7:cf:2e:
22:cd:5f:8b:08:c6:bd:98:48:2e:22:6e:7a:34:6e:1f:8e:91:
cc:97:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:50 2025 by rpki-client