Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: sGzysNUGPQc4XNUkwzSS7kd9MvaWqbVUYqoIB2YyVBY=
Subject key identifier: FF:FB:7D:AC:2E:14:E4:AB:53:22:06:44:64:91:61:96:10:C4:45:9D
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019754FE61619048517C1C2D6B0784207A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 09B0
Signing time: Mon 09 Jun 2025 14:00:46 +0000
Manifest this update: Mon 09 Jun 2025 14:00:46 +0000
Manifest next update: Tue 10 Jun 2025 14:00:46 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: Ag3SeycSRNIKSBt7vK81heKZLtB8PAEYJJ+F+ymfsNQ=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:61:61:90:48:51:7c:1c:2d:6b:07:84:20:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Jun 9 14:00:46 2025 GMT
Not After : Jun 10 14:00:46 2025 GMT
Subject: CN=fffb7dac2e14e4ab532206446491619610c4459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:3b:1b:d8:dd:9e:21:47:29:3d:d9:cf:4b:
db:27:f6:88:59:b7:21:04:87:ed:4c:87:3f:fe:7e:
fc:3e:cd:8f:55:47:29:d7:09:76:e0:a0:a2:45:35:
76:f1:6a:e3:66:33:54:8f:0b:16:e1:0a:64:b6:24:
ed:eb:6d:11:68:47:e7:4e:4e:59:a3:41:25:8a:07:
e4:a9:c8:31:a3:13:4b:37:a6:cf:d9:88:95:bc:56:
0b:dd:ea:cd:ca:ee:66:60:bd:8e:cf:0b:61:4b:bc:
db:f2:24:d1:62:c2:4b:91:15:8a:f5:75:5e:44:41:
60:6e:37:19:48:22:3c:1f:ea:a3:b4:fb:f8:ba:a8:
ca:15:1b:27:a5:fb:75:86:44:d7:30:89:59:18:46:
3c:e0:15:02:3b:32:23:b8:5a:46:2b:90:4b:e0:7c:
df:af:fd:3a:f9:03:cb:10:95:e9:8e:66:38:cc:67:
54:ab:18:29:3a:d8:96:94:d1:7a:cf:95:fa:35:95:
2f:6d:47:36:fc:9f:7d:67:9b:a1:10:06:55:0e:3c:
f6:e4:d1:a8:b6:39:66:c1:47:83:01:14:a2:55:0f:
f7:11:59:3b:6c:ef:13:ba:80:fe:52:cd:3f:25:52:
5f:5f:0e:90:06:9e:38:d7:31:b3:9b:77:1b:7d:5e:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:7D:AC:2E:14:E4:AB:53:22:06:44:64:91:61:96:10:C4:45:9D
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:b4:e2:42:7b:cc:0c:a1:8b:83:27:b4:de:29:bd:97:5b:
fc:a4:59:8c:c7:d9:00:4e:1c:d9:0f:67:14:ad:cd:9e:bd:a8:
95:b2:d2:87:2b:61:8e:86:f1:e2:ef:f6:1c:2f:a6:49:97:32:
f0:b1:0a:aa:92:f0:3d:e9:70:4a:d7:e4:09:91:b6:3f:58:10:
2b:54:03:99:a9:2e:df:91:1f:bb:c4:5e:98:01:fd:5a:0c:86:
c6:c6:a3:eb:87:6d:f8:d0:66:b2:8f:96:16:c7:3b:56:2e:bd:
8b:5a:c1:36:96:92:2b:72:67:92:4f:6d:f1:3d:ed:d2:b9:5a:
45:b6:e8:53:12:9f:0e:59:22:e2:e5:c8:bd:5e:2a:cd:bb:73:
93:6b:d4:9f:c0:19:50:14:d4:d6:a6:b6:b9:4e:68:87:a2:bf:
a2:e7:34:1f:2f:dd:46:78:56:a3:da:d2:58:3e:df:b3:dc:e2:
aa:3a:a9:3a:23:77:82:06:23:df:aa:25:04:27:dd:c6:02:bd:
e5:b0:1b:07:d7:76:28:90:d5:c1:cb:65:82:9e:92:02:94:cb:
2a:78:42:b3:8d:fb:4f:2b:16:f3:bd:90:9e:ee:d1:28:ab:98:
3f:d6:3d:5e:19:89:61:18:f9:be:06:2d:30:4a:38:d0:86:29:
70:56:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:01:47 2025 by rpki-client