Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: e0ZasUwfi9tiCRZfYSSF7jExkBDVC86JNjIy39NWM2k=
Subject key identifier: 66:EF:21:54:8C:9A:D3:A6:E6:1C:CF:E5:44:11:D4:9A:D1:BA:09:4C
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0197499F3CDB8605705EF3AD2C0F31233BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: NQzyEJuBPtk+7frx5kYwzqK5q/N+QhG894x7F0IEI8c=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3c:db:86:05:70:5e:f3:ad:2c:0f:31:23:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=66ef21548c9ad3a6e61ccfe54411d49ad1ba094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:8c:cf:8f:d1:b9:29:75:27:2a:51:38:72:
cc:f2:0b:21:b1:67:9d:6c:d6:5c:f5:d8:71:2e:20:
0c:a4:69:6d:b3:7e:10:5e:8d:b7:54:19:ed:48:33:
26:72:2f:32:3a:1d:26:cc:bf:42:c3:55:b6:bc:70:
77:1b:99:b3:9e:84:77:da:16:7d:1d:b7:c1:bf:17:
12:60:55:f7:6d:2b:a5:27:44:3e:a4:17:1e:ea:71:
8a:aa:4e:fe:db:b9:8b:ea:c7:9d:c1:8a:1a:9a:b3:
7d:5b:3d:41:a1:fd:d3:8e:cf:78:a7:bc:19:84:9c:
8b:5d:4e:64:95:5e:98:5c:11:b4:57:5f:a0:ba:36:
75:61:2a:49:13:a2:e2:6c:63:7f:ab:c3:05:20:ed:
98:a8:b9:5d:fd:c4:e9:a6:af:3b:8d:4c:28:60:5e:
78:e5:b6:66:6e:7d:99:37:a0:b8:0d:2b:2e:e9:d6:
f3:21:df:73:21:0c:6b:20:f5:4e:86:fe:a2:29:79:
9b:37:3e:7e:87:4f:92:91:db:d2:c0:e0:32:b5:21:
40:82:5f:b0:20:06:55:9e:cc:a6:63:a5:54:53:1d:
b3:68:9a:a8:61:45:86:f1:43:f4:2d:c9:3e:c7:9d:
cc:f6:e5:6d:13:d0:91:9f:74:a3:7f:dd:2c:c2:80:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:21:54:8C:9A:D3:A6:E6:1C:CF:E5:44:11:D4:9A:D1:BA:09:4C
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:ab:bf:30:9b:f1:51:8f:51:20:23:0d:d2:d8:1f:59:8f:
7d:84:34:92:14:97:70:31:9f:e8:d8:9c:44:3a:6c:b7:05:13:
c8:dc:99:80:f3:44:ae:ec:89:d8:21:21:5f:a3:0d:11:ab:fc:
35:ec:43:17:01:62:3d:42:65:95:57:ed:f5:5b:5b:ee:e7:e9:
aa:04:92:79:8c:eb:67:f5:da:ca:ad:79:17:01:72:18:ad:89:
8f:77:84:01:31:f6:f7:83:ab:8b:17:8e:61:47:89:40:89:1d:
b1:3b:1c:40:40:b3:28:d9:0c:13:1f:0d:53:b5:fa:e7:f2:a2:
ac:de:20:e6:82:79:ac:df:1f:95:32:2a:d7:e9:d7:84:37:1f:
be:71:04:ac:95:49:6c:fb:e6:fb:15:50:e7:f8:db:1a:da:85:
93:a2:17:c4:c8:19:74:a7:ce:3e:cf:29:01:47:1f:99:b8:f3:
60:9a:63:ad:c2:35:e8:10:9d:7a:af:1f:d0:50:08:16:5a:eb:
09:43:89:3e:c4:3b:0f:f3:9d:2b:ea:29:cc:5a:10:7f:cd:3b:
87:e0:b4:21:fe:d1:1b:fe:d7:d6:04:14:83:cb:c2:ea:d2:29:
e3:39:77:f2:27:95:2b:8c:08:4f:a0:35:af:c2:23:a1:09:95:
10:1a:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:25:15 2025 by rpki-client