Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: nyrxPXqE6VgWknvNDhxPLOvlfYL7bIDSCGZ/fk4DwBs=
Subject key identifier: BA:69:96:33:AE:67:71:47:03:15:C7:38:30:5A:0C:28:6D:B7:6B:C2
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01976282C52C99977B73CE10D57BDF689321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 05:00:26 +0000
Manifest this update: Thu 12 Jun 2025 05:00:26 +0000
Manifest next update: Fri 13 Jun 2025 05:00:26 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: l6Br63WYR+HRqpXzonEhuctAcycoIIADbReWdiBHbg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:c5:2c:99:97:7b:73:ce:10:d5:7b:df:68:93:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 12 05:00:26 2025 GMT
Not After : Jun 13 05:00:26 2025 GMT
Subject: CN=ba699633ae6771470315c738305a0c286db76bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:67:eb:39:34:c6:80:92:ba:5c:14:29:8c:
d8:99:3a:88:3d:34:56:09:4f:fb:1e:16:68:96:92:
61:f1:a2:0b:aa:bb:c0:f7:ba:ab:14:d9:68:94:b5:
20:f4:59:56:c2:35:46:3d:e5:08:03:5a:b6:22:fc:
d7:ad:76:7f:b1:00:68:3b:7a:fc:6b:bf:1a:f6:54:
82:7f:82:90:a8:ac:a7:0e:30:95:cd:d3:77:a4:85:
3e:7f:3c:c0:6d:41:bb:c4:e5:23:c0:26:58:c4:2f:
6f:6e:3a:60:ae:3f:a9:e3:34:90:81:d2:f1:cb:6b:
fe:7a:d8:0d:1a:c0:d1:2b:ef:9a:3c:1d:0d:2c:99:
da:40:ec:ae:ca:1f:1c:ab:79:ad:39:fe:1f:3d:d7:
48:74:68:84:c6:cc:13:b9:fd:d9:de:ab:cb:9e:55:
54:ef:59:aa:77:e8:c1:2c:12:ca:9e:fe:63:1b:d1:
20:cc:7a:62:50:83:20:71:6b:de:8b:bb:fe:a2:a1:
64:77:4a:0c:3e:a4:fb:68:34:fb:c3:9c:ac:37:9d:
b6:7d:b6:8c:c8:e2:ad:08:60:e2:43:39:af:f0:85:
dd:64:91:55:e7:26:42:b0:6d:8d:16:15:5c:da:e1:
6f:59:9d:f2:6f:70:1f:db:49:c5:e2:c0:5a:04:b4:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:96:33:AE:67:71:47:03:15:C7:38:30:5A:0C:28:6D:B7:6B:C2
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b7:c7:27:9d:bf:fd:82:b7:1b:a5:ec:88:c4:5e:78:01:65:
90:5a:36:c4:e6:36:e4:e6:11:50:97:4a:5a:a0:ba:50:03:d2:
2c:ab:b4:7b:a7:14:d3:4b:0f:dd:8d:67:d4:49:98:08:1a:cc:
a9:8b:c5:12:63:98:08:51:1f:d2:ab:3a:d3:e1:a9:54:fc:7d:
b7:0b:2e:3b:b2:85:5d:9a:76:04:5c:48:8c:ed:49:84:80:75:
c1:2f:9e:d9:03:28:ed:37:d1:62:20:0e:a8:af:61:4b:b9:80:
2a:f0:3c:90:72:55:92:19:c0:12:57:15:89:66:59:9c:65:a5:
10:46:fa:ca:c2:ed:86:cf:74:d2:20:e0:11:a4:28:41:21:19:
86:c3:0c:f0:93:a8:36:00:40:80:75:35:8d:60:72:d1:55:b8:
7d:39:91:72:3a:c0:ef:c5:48:89:81:20:10:f6:77:80:14:4c:
e2:76:2b:23:2f:2c:95:00:3b:07:68:db:05:4e:26:0a:83:78:
f5:13:0c:1c:71:bc:a8:f4:64:37:3b:54:24:fb:f4:7d:31:26:
95:34:14:dd:83:af:ac:e9:d5:fb:5f:40:d9:9a:a4:52:4f:e9:
5a:72:31:ff:b2:5e:91:98:25:3b:4c:92:21:a0:b3:fa:82:5e:
78:7d:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:46:09 2025 by rpki-client