Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: i2gin34H8BxDAjFuBDoFs4S9Qr2ViormJ2efSzHXX3Q=
Subject key identifier: 95:3D:31:07:97:E9:D9:A7:6F:1A:3A:EF:A7:0E:B8:57:68:FA:E4:DF
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019758DAF646AC47995DE1C72189FE7801E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 08:00:34 +0000
Manifest this update: Tue 10 Jun 2025 08:00:34 +0000
Manifest next update: Wed 11 Jun 2025 08:00:34 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: tDS7Boitr0lt4iY/koK4VR6GjDVZJgjYiDbAoU2xfVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:f6:46:ac:47:99:5d:e1:c7:21:89:fe:78:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 10 08:00:34 2025 GMT
Not After : Jun 11 08:00:34 2025 GMT
Subject: CN=953d310797e9d9a76f1a3aefa70eb85768fae4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:e3:62:ef:f6:86:81:f4:f6:be:79:e3:59:
7f:a5:8b:db:08:09:57:aa:ec:07:1d:d3:5d:ec:76:
33:7f:ae:41:6e:7f:69:b7:ff:28:b5:b7:d9:9c:57:
b8:f9:30:2d:a1:51:dd:c6:62:77:ac:17:2f:bd:3a:
2c:6a:89:ac:89:b9:49:f4:fb:a3:65:4a:ce:2f:a2:
86:84:81:74:ea:74:77:40:3c:25:47:2c:e5:9b:67:
c3:fe:62:7c:51:b8:b1:38:58:16:d7:5c:f8:3c:9b:
85:ed:bb:ab:2b:89:2a:76:88:84:d7:9b:d4:07:4d:
7a:2d:4a:b0:8c:3b:51:a6:35:d8:51:04:b9:ef:8f:
75:1c:93:da:cb:a4:c6:75:6e:89:c8:9c:ee:50:d1:
53:57:c5:88:d5:b9:96:c0:7c:a9:5a:87:85:05:95:
6a:0b:27:b9:f2:fd:a3:5e:1d:80:24:69:ca:38:36:
c4:3b:2e:24:bf:ff:29:49:be:8e:91:0c:d1:95:a9:
c2:7d:59:e3:9b:c1:a0:24:1e:cc:8e:24:aa:04:eb:
cb:d7:6d:9f:f6:b3:fe:5a:13:03:a0:c8:fc:70:01:
66:7c:16:47:ba:74:8e:27:2c:93:ff:e6:7d:83:9c:
b2:26:f8:c8:0b:99:35:32:bf:a9:d4:d0:b3:76:f3:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:31:07:97:E9:D9:A7:6F:1A:3A:EF:A7:0E:B8:57:68:FA:E4:DF
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:17:9e:8f:bc:3e:82:91:00:10:13:cf:95:96:59:65:4d:
5e:3e:18:46:38:f1:3e:5d:9e:6a:9a:0e:91:e1:06:c5:d6:e7:
90:7c:4c:99:e5:c1:1c:fc:b2:04:99:92:d1:75:c1:65:59:91:
85:0b:57:c0:0d:01:ec:72:f5:b2:93:bf:b4:cb:8b:23:d2:c0:
97:98:98:f0:e0:bf:d2:fe:8b:62:08:ca:5b:5b:41:af:14:25:
40:01:61:4a:65:4a:7e:24:3b:d4:ec:9a:04:c3:0f:54:16:d2:
75:56:28:42:fc:61:d2:99:14:aa:22:86:45:a9:e6:0b:58:2a:
15:1d:64:11:fd:c8:85:8a:a7:7b:ff:ac:e1:f9:a9:a6:b7:36:
10:e6:58:9f:f0:dd:ba:65:be:50:38:7d:dc:4f:1e:cc:72:03:
e7:99:97:10:2c:4a:5d:93:ec:75:7a:8c:67:03:36:f6:70:b1:
5a:e9:f8:3c:bc:8b:dc:5f:7d:97:9d:4e:d5:c5:85:23:07:95:
38:fa:81:b9:1a:ac:7f:d4:6e:e9:0e:d8:bd:54:ef:ba:c8:66:
60:e1:9b:c5:7b:1e:af:68:4f:3b:df:f7:ac:f6:27:c8:81:82:
d3:24:7e:3b:c3:3c:e6:72:2c:b3:e2:3c:6e:2c:cc:90:e8:62:
4d:98:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:09:20 2025 by rpki-client