Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: AyQyWngvNdGT05AuErLJj2ewgCfH0MdANIba7li1f14=
Subject key identifier: 06:25:94:D9:B4:82:B2:A4:D9:AE:3F:E5:A4:6A:83:D5:AA:55:AF:68
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01975310668573F6772A7E6DB3B53F83DC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 05:01:13 +0000
Manifest this update: Mon 09 Jun 2025 05:01:13 +0000
Manifest next update: Tue 10 Jun 2025 05:01:13 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: N8PyV7XcdI8LmSaF1ZZR7hjFt3OBk1kwk/JiPK+IS7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:66:85:73:f6:77:2a:7e:6d:b3:b5:3f:83:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 9 05:01:13 2025 GMT
Not After : Jun 10 05:01:13 2025 GMT
Subject: CN=062594d9b482b2a4d9ae3fe5a46a83d5aa55af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:85:bd:ab:2b:eb:93:e4:df:9b:61:66:2a:
85:bc:25:98:4c:bf:f7:52:e3:3f:0a:0b:1b:64:d1:
d5:c4:e4:f4:43:23:1c:5b:dc:1b:7e:b9:66:48:e1:
b9:1a:6e:9c:19:9a:1c:0b:d2:79:64:79:4b:9e:46:
0c:d4:77:64:ce:12:84:96:e9:d5:4f:0b:2a:8f:e8:
b0:39:73:b7:81:df:f7:a0:19:6e:ef:91:f6:84:7d:
a8:25:bd:2e:0a:bb:72:a9:a3:7a:41:30:c5:e7:d0:
3a:9b:e5:d9:cf:0c:12:b6:fa:f7:1a:39:60:ac:8a:
bb:c4:7e:42:19:91:cf:fc:90:11:e9:aa:48:e8:67:
2d:f9:b0:02:d1:07:8a:41:8e:49:72:f9:66:14:c8:
fb:87:4b:52:6f:f6:e1:ff:e0:b8:a3:f9:98:d3:5c:
1a:98:d5:25:7d:8e:fe:aa:60:83:8f:29:ee:97:fc:
b1:81:2c:c4:19:73:c0:2f:ea:26:a4:d7:02:da:8b:
2c:a8:ef:42:69:de:cf:96:37:f9:c7:1b:dc:06:e5:
cd:92:6d:06:48:03:c2:d8:df:ae:62:25:86:b4:67:
a2:7b:5d:65:11:1b:5c:29:49:e9:c1:9b:2a:68:4c:
fb:59:cc:99:12:79:7f:56:d8:0b:14:e1:6b:35:db:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:94:D9:B4:82:B2:A4:D9:AE:3F:E5:A4:6A:83:D5:AA:55:AF:68
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:02:bd:1a:80:ab:12:bf:21:9d:e3:45:a8:16:dc:2a:f8:55:
3f:19:70:50:0f:62:cd:58:c7:8b:8b:cd:78:c9:8c:3a:cb:71:
9b:88:87:69:2d:1a:21:ed:68:1a:98:c0:d6:98:0b:76:f0:0a:
8c:64:9e:cc:1d:27:7d:8f:47:bf:68:0b:bf:f1:05:f8:70:ef:
b1:9d:78:77:ae:e0:c2:66:6c:a9:af:24:53:52:23:5f:ce:07:
20:a3:77:a2:c8:14:96:2d:cf:c9:13:99:50:7f:a6:bf:e9:2c:
fe:06:a5:4f:7c:c9:e6:60:d5:b9:e9:3a:43:ff:53:fe:da:65:
07:17:a0:60:9a:d3:a9:82:b8:5f:25:9a:95:19:0b:a7:f1:5d:
25:cf:2e:c5:c8:1d:2b:4e:11:fb:7c:fc:19:07:27:b2:7a:0c:
55:7b:5d:ca:92:da:a8:56:2e:60:ca:3a:2d:99:0c:d4:58:21:
9c:3f:42:b7:e3:c4:0c:b4:03:90:7c:ed:e7:6b:74:51:07:70:
85:77:7a:3a:df:6d:fd:c2:5f:0b:22:a4:ea:d0:4d:0d:ec:65:
0f:16:f8:08:c0:f1:b1:08:0b:d1:78:98:5e:6a:fb:2e:6a:ac:
cd:2a:ef:cb:2a:a7:be:26:9c:2f:e0:3f:0e:5d:4b:ef:46:4c:
4c:13:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:40:37 2025 by rpki-client