Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: 3tkBxxS17qUpL5O0s/OsqgEQemFUHsK1AjlDdeId4Mk=
Subject key identifier: D3:B9:4D:BB:46:C6:CF:5E:CD:B0:D6:BA:A4:6F:02:9D:47:AB:72:F4
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 019751FCF84FF39087BAC0DB1DFDB9CFEDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 00:00:22 +0000
Manifest this update: Mon 09 Jun 2025 00:00:22 +0000
Manifest next update: Tue 10 Jun 2025 00:00:22 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: mEZ2o5d/aqCYvcGl8iUTufJSj0uUBNTZJJ/LZrVjqOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fc:f8:4f:f3:90:87:ba:c0:db:1d:fd:b9:cf:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Jun 9 00:00:22 2025 GMT
Not After : Jun 10 00:00:22 2025 GMT
Subject: CN=d3b94dbb46c6cf5ecdb0d6baa46f029d47ab72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:65:e4:9e:52:66:da:a4:fd:27:d9:fb:15:
f3:39:dc:04:38:ee:17:d4:24:f6:46:d9:cd:e2:ff:
4c:e3:d2:13:b6:67:54:c4:fc:b1:f2:45:a5:84:85:
79:7a:43:aa:fc:8b:fe:58:2e:fe:ea:7f:b6:a8:13:
08:87:bb:4a:13:58:db:69:16:ae:96:29:5e:75:62:
4c:a0:5e:3a:0a:f8:a8:b4:0b:7b:09:5c:0f:29:b6:
ca:28:bf:6c:e6:4f:33:3b:66:2d:9f:f2:96:ea:8a:
d2:9f:01:95:f1:75:bf:e1:e5:97:e2:d3:10:49:70:
b5:4b:96:1a:b2:52:61:4d:22:ac:e7:e1:16:49:c6:
e5:6d:24:fd:56:8e:d8:b8:64:80:c4:b9:c0:ff:19:
8c:70:7c:55:e1:b4:df:29:aa:43:dd:1d:cd:fb:e3:
6d:e6:4e:38:61:97:08:cc:a4:29:c2:c3:dd:87:ef:
78:44:0d:6f:a7:14:28:86:20:0d:9a:8d:7c:1c:a7:
ac:00:9a:67:3c:b2:9d:9a:10:96:c0:de:6d:a7:33:
76:1b:42:54:3a:9f:2b:b5:4c:b9:34:89:bf:3a:1c:
77:99:bb:bc:9d:61:aa:13:34:0a:9a:8c:b5:f5:ce:
56:02:07:18:ab:98:70:dd:f9:2f:86:9d:ff:67:af:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:4D:BB:46:C6:CF:5E:CD:B0:D6:BA:A4:6F:02:9D:47:AB:72:F4
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:c5:04:a2:18:ba:a4:62:ac:8b:be:57:6f:93:04:44:b4:
2d:4f:c8:f9:ef:99:09:03:55:58:fd:0e:1b:f4:16:8e:ff:3c:
52:d2:cb:41:45:55:d0:c1:86:18:af:1d:0f:20:33:5f:d3:c2:
b4:f6:dc:4f:1a:2d:a9:11:1b:5a:0d:a6:b3:04:69:40:46:b3:
e9:07:7e:b1:26:e1:e3:87:26:9f:a5:94:9a:36:6f:63:df:6b:
a5:12:b0:c8:40:7d:7f:85:c1:1a:d6:57:82:91:20:d2:2d:c2:
10:c0:70:9f:77:d7:62:85:aa:12:ec:66:ab:1f:3d:11:e2:fb:
0c:7f:91:c1:e4:b6:2f:15:03:83:0d:2e:10:1c:d2:49:c2:c0:
d5:15:7b:db:6a:f2:01:e4:a0:8b:fa:b7:46:a0:b3:cb:67:95:
32:aa:57:78:89:e9:82:b6:ad:90:7a:b4:20:cf:f5:d6:40:c0:
c5:a5:84:87:9c:1e:dc:58:f5:4e:b9:b5:c0:b6:a0:e8:42:22:
1b:57:78:f9:94:a8:5b:cd:08:d0:88:bf:4b:18:8f:b0:38:e3:
79:c6:9b:54:97:23:e7:21:8b:1b:93:b5:89:a7:a6:07:97:f4:
4b:48:b8:78:76:b3:88:a8:2b:b4:3b:87:74:71:14:6d:fa:30:
b1:99:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:01:58 2025 by rpki-client