Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: pHJOOF7eg9pKmXn/pBYyP+ls7XDvK18uGasnXxaBfHE=
Subject key identifier: D2:20:41:CC:B2:2C:11:B3:87:5F:76:A5:C9:F7:71:37:9E:18:F5:C8
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 01974E58165123BFC153C9E4729B0B75ECF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0C60
Signing time: Sun 08 Jun 2025 07:01:25 +0000
Manifest this update: Sun 08 Jun 2025 07:01:25 +0000
Manifest next update: Mon 09 Jun 2025 07:01:25 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: U+aOsjdGGNujCmhxO8Ufs3T+CFjHwypIuT8Vo+CG2TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:16:51:23:bf:c1:53:c9:e4:72:9b:0b:75:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Jun 8 07:01:25 2025 GMT
Not After : Jun 9 07:01:25 2025 GMT
Subject: CN=d22041ccb22c11b3875f76a5c9f771379e18f5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:21:56:30:b2:49:97:49:fb:34:2a:58:48:
3c:f5:cf:73:0e:d5:4a:1e:ec:9f:95:bf:58:11:53:
65:5e:63:34:63:c4:fe:bb:19:b5:fa:24:b7:12:12:
6a:8f:cd:67:96:97:19:55:27:fb:61:87:51:93:eb:
02:43:a6:aa:84:8d:05:a3:31:6a:0d:83:bd:93:e5:
12:6e:aa:cb:03:f6:12:5f:85:5b:c5:6e:47:e1:69:
04:ce:13:57:dd:49:6d:16:23:8b:31:5f:d3:4d:bf:
9d:72:1b:e8:4e:79:9c:be:29:11:19:92:73:a7:6d:
8e:0a:3d:3b:9d:c0:25:46:e7:bf:1a:86:35:7a:5e:
2f:31:87:50:0d:3b:66:a2:5a:a7:89:0b:2a:4e:46:
b2:bb:09:d5:6d:33:96:5a:04:64:47:37:a1:2f:df:
74:f9:4b:e1:9e:f3:a4:6b:be:19:38:92:1b:29:43:
af:5b:61:8f:54:9c:2d:e3:61:63:53:0d:78:d4:00:
28:77:59:5d:c0:4f:34:2d:c4:f6:ee:db:7f:45:d4:
3c:27:08:c9:2c:f8:4d:c1:8f:60:1a:71:8a:5a:06:
cd:2e:ba:4f:e8:62:1e:18:65:35:9e:98:46:3b:86:
ed:11:ae:eb:e5:0e:85:9f:1e:a6:ea:94:ca:46:5f:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:41:CC:B2:2C:11:B3:87:5F:76:A5:C9:F7:71:37:9E:18:F5:C8
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:07:9c:b6:a4:46:cb:67:67:c1:66:fa:2c:ff:a0:a9:f7:
36:33:3f:5c:38:c1:a8:65:3f:20:b7:8d:cc:cf:24:d8:9e:40:
f9:83:20:49:8c:56:fd:36:5a:42:64:91:c8:b1:f5:c2:e2:30:
b5:ac:64:fe:92:e8:c9:2f:9d:3c:37:f3:d7:51:81:48:83:2c:
37:c3:e5:9b:22:cf:ce:89:4a:94:2b:04:72:e2:45:eb:54:32:
b9:99:b4:a3:22:3e:6c:e3:55:a1:bc:0e:eb:20:28:10:00:fd:
1d:b0:99:ad:fa:37:87:ed:27:d8:3f:b4:48:54:f1:50:16:e5:
9d:b3:79:e3:7c:6d:e3:27:92:1d:18:c6:ff:ac:d4:4a:d4:5e:
81:18:50:8a:3b:7b:9c:01:9e:c2:91:f8:64:97:4b:be:ae:cb:
2b:72:b8:38:63:c1:ab:91:87:b0:b7:7e:ef:33:26:af:85:07:
4d:b8:6b:07:d8:32:7b:e6:e1:97:0e:a5:32:42:9c:48:d9:c1:
89:3c:e7:f7:a8:a1:ef:87:2c:c9:ec:37:0a:ef:b7:08:b4:40:
d3:b8:d5:20:67:6f:0e:1c:28:37:29:ab:72:9d:98:35:71:3c:
4e:63:a0:21:47:c9:85:0b:f4:2d:c7:a1:ef:12:b2:62:1c:dc:
7c:c8:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:44:01 2025 by rpki-client