Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: UWQneaFfS3UVqBnxN6oTw27xsWVQ3xpCRqbbG97bqiM=
Subject key identifier: F4:8A:5C:28:63:67:10:74:C0:5E:55:D7:4D:AF:E5:D1:AF:0F:8A:B1
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 01974A7B34E2E7CCE994CF2F757F39C7E3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0975
Signing time: Sat 07 Jun 2025 13:01:17 +0000
Manifest this update: Sat 07 Jun 2025 13:01:17 +0000
Manifest next update: Sun 08 Jun 2025 13:01:17 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: c+Ouh+HN3JGBfJUx8iKsOPJMSMlqzW1jRxUEaFayEms=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:34:e2:e7:cc:e9:94:cf:2f:75:7f:39:c7:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Jun 7 13:01:17 2025 GMT
Not After : Jun 8 13:01:17 2025 GMT
Subject: CN=f48a5c2863671074c05e55d74dafe5d1af0f8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:51:7f:03:0c:92:92:84:f3:52:7a:b8:6f:
b0:05:b3:72:c5:67:8a:ad:24:4d:c0:53:32:11:28:
e0:80:c3:d8:59:0d:3f:51:b9:36:b6:8b:70:f4:53:
41:d7:11:70:dd:fc:85:75:a8:9e:92:59:2d:37:cb:
58:4d:fa:17:b0:3e:50:45:dc:6f:1d:e8:86:1e:bc:
71:09:77:2a:95:b8:1c:4e:25:f8:cb:b5:4f:d5:c6:
3b:23:f6:1c:32:e0:ab:13:e7:25:c1:93:37:73:ac:
60:b5:09:38:fe:7b:e2:02:04:80:77:0d:6a:5b:cb:
f0:b2:cb:81:62:15:a8:a7:4e:66:07:50:4c:68:74:
b9:7e:04:9a:1a:0a:d9:53:4b:de:ee:fc:ec:bf:45:
be:b1:8a:98:5d:be:c6:ae:63:67:d9:d7:bf:6f:b3:
d5:91:00:a8:16:af:fa:9f:26:07:4e:13:2c:bb:38:
c4:8f:bc:f6:c6:c6:c4:af:9d:89:50:71:98:aa:0b:
a0:75:5f:d7:0c:c0:2c:a2:01:3a:af:bb:77:cd:ae:
c4:ac:fa:ce:54:07:d4:61:4e:83:7b:b2:b8:ee:ea:
ee:7d:41:e4:06:9b:56:0b:30:cc:86:53:1e:28:09:
03:28:2c:6a:69:59:47:17:b8:79:79:39:87:2e:e3:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:5C:28:63:67:10:74:C0:5E:55:D7:4D:AF:E5:D1:AF:0F:8A:B1
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:94:5c:c0:63:1b:b5:6f:80:68:18:51:07:a1:70:bf:2b:9a:
f4:bc:88:9c:50:7e:f8:95:4e:f3:2e:8e:60:e4:da:9d:46:67:
a3:8f:eb:2d:0e:76:c1:3c:82:a2:20:6d:a4:1c:ee:1b:24:96:
2a:6c:a7:ce:e9:14:42:91:80:f8:2f:cb:46:6c:5f:bd:62:5d:
e9:35:c5:99:e6:6d:ad:27:1c:e2:07:69:81:74:f3:fe:8b:50:
1f:fc:db:c1:f9:39:48:f2:f6:06:f2:34:ca:c9:5b:7e:a2:35:
e7:22:38:d3:26:ab:e8:bb:58:fd:29:47:91:f2:0a:98:5d:4a:
bb:4c:66:fd:ca:a1:72:e9:59:70:e7:e8:18:1c:6e:5e:32:44:
7c:8f:13:1e:64:40:28:fa:81:63:b7:7c:45:d0:94:16:8f:d7:
18:0c:9f:96:b0:57:7c:ed:6b:d7:c0:23:0a:dd:d0:3d:a4:de:
d0:d3:78:94:10:8b:36:a1:06:42:32:e1:a4:02:b2:64:06:9a:
f6:d0:49:56:c6:88:d8:88:cc:69:e3:a6:64:4d:b0:2c:d7:73:
95:91:ee:56:94:2c:2c:57:fb:a5:6b:64:7a:bf:65:00:76:b7:
8a:db:26:76:6b:0a:bd:b0:df:23:7d:5b:b4:86:b0:51:08:66:
bb:6a:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:44 2025 by rpki-client