Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier: 2WIwVS1U+PSJPxTmuA8Sq77hByVBt7La693qlo+rSV0=
Subject key identifier: E5:D5:45:60:3F:53:22:1B:6F:48:72:93:9B:9B:2A:A5:BB:13:A0:C5
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 0197534752A20C0E33865A265630E857A67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 06:01:12 +0000
Manifest this update: Mon 09 Jun 2025 06:01:12 +0000
Manifest next update: Tue 10 Jun 2025 06:01:12 +0000
Files and hashes: 1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: Jclgo4j8U2s5NWKn5HFrSOc3vT323ao8eWxKcdhSufE=)
2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:52:a2:0c:0e:33:86:5a:26:56:30:e8:57:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Jun 9 06:01:12 2025 GMT
Not After : Jun 10 06:01:12 2025 GMT
Subject: CN=e5d545603f53221b6f4872939b9b2aa5bb13a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:a7:8a:26:f3:f1:2b:c6:e9:35:e1:34:36:
bd:a7:1d:15:53:63:11:2c:45:df:d0:e7:ec:dd:28:
bd:94:c2:d1:dd:5e:0d:e9:6f:cc:0f:73:28:51:39:
33:02:3b:e8:1b:01:94:9e:a5:22:17:4e:22:c5:e8:
60:10:f9:7e:05:14:65:36:b3:b3:e8:68:44:17:44:
89:a5:4a:d7:6c:81:fa:83:b7:91:2c:ea:53:8f:b8:
25:f7:03:f8:6a:3d:35:7a:b7:75:ac:08:56:c9:19:
5e:0b:bd:67:4e:03:ab:e3:ef:00:2e:ed:1f:e7:c0:
8d:b7:65:93:5c:65:91:9d:8c:05:57:68:fb:c8:51:
a7:8c:ec:e5:82:28:95:7d:5b:70:d4:e8:60:f5:71:
ef:c7:73:af:97:5e:92:30:d2:48:7b:87:a2:8f:c6:
b9:c0:f3:c8:e5:a6:fb:7c:c4:6f:b3:a1:78:01:19:
56:c7:37:7a:db:fe:07:46:8b:3c:f1:f1:ec:05:2e:
35:43:55:f7:83:e3:17:b6:3a:85:7c:f0:3b:d8:a8:
d7:d2:18:d7:ab:d3:c5:9d:d9:b1:a4:9d:64:31:40:
4a:94:fe:b4:4d:01:02:8f:7e:b0:88:27:0e:e9:50:
b3:6d:29:a9:3b:a5:87:c2:89:1e:56:4e:c0:8e:71:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:45:60:3F:53:22:1B:6F:48:72:93:9B:9B:2A:A5:BB:13:A0:C5
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:5d:c0:e5:76:2a:0f:67:87:f1:74:eb:6b:fa:51:03:f5:
df:0d:5a:6b:04:07:d8:96:9c:82:bb:fd:1c:a1:27:0a:c2:21:
71:21:87:1e:7c:a6:1b:5b:81:07:49:dd:92:18:99:c5:84:15:
d8:eb:4b:02:7b:32:fb:15:25:78:ef:3d:cf:3c:30:bb:a6:0c:
e9:ef:95:12:86:df:2d:a4:e5:12:de:7c:6c:a1:f6:f9:ab:91:
6f:7e:fe:99:b2:68:c5:67:71:4b:7f:0b:e0:71:c8:fe:77:a4:
87:b6:ad:d0:c2:8b:77:b8:68:19:2a:3c:1f:10:56:9d:33:30:
83:fe:d3:8d:5d:17:10:bb:fd:b3:84:1b:b9:ea:96:e7:db:ce:
bc:dc:94:ec:a6:2f:68:8f:76:62:f3:d5:52:9d:3f:16:dd:5a:
f3:b2:07:9c:56:80:3e:a0:db:65:00:e7:4a:21:0e:16:99:de:
3a:47:eb:41:6a:c9:4b:82:08:94:3a:5a:0e:8b:31:db:3f:fe:
92:a2:32:57:5c:c4:51:a9:09:82:8d:7f:ef:cd:e8:c4:d8:a5:
9a:80:9a:09:eb:aa:5f:4d:b1:ff:8d:04:05:17:73:1f:20:88:
25:0b:f3:6d:9f:28:53:f5:b5:1e:b1:cb:71:9a:03:cd:c7:51:
79:ce:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:00 2025 by rpki-client