Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: BlE1Gp0gcTHw6VN6k/A1bioFT3cVHfG4a/35h+eqiQU=
Subject key identifier: 02:CE:43:1C:AA:7A:11:72:6D:8F:BB:CD:DF:68:E8:F2:97:21:EB:8D
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01974EFC20BC1DECC03C3B28EA6B7D786A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 05AA
Signing time: Sun 08 Jun 2025 10:00:35 +0000
Manifest this update: Sun 08 Jun 2025 10:00:35 +0000
Manifest next update: Mon 09 Jun 2025 10:00:35 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 8+mBe50EYUXWkvjDamZJz1pzrlS4IEi1YJHtVnfKGWo=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:20:bc:1d:ec:c0:3c:3b:28:ea:6b:7d:78:6a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jun 8 10:00:35 2025 GMT
Not After : Jun 9 10:00:35 2025 GMT
Subject: CN=02ce431caa7a11726d8fbbcddf68e8f29721eb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:aa:64:26:7c:8e:da:67:52:d1:2e:36:5c:
9c:ee:9f:6e:0a:09:d5:ab:2d:42:c7:4f:7a:55:98:
6e:a8:33:8d:7f:ad:5b:ee:6b:29:26:d2:6f:91:90:
7d:85:e4:46:e7:25:16:0c:51:5e:3b:21:7e:6c:56:
19:d4:57:ea:27:77:c0:38:13:b4:9f:f1:cb:0d:fc:
00:db:fe:68:a9:b4:db:58:72:6c:8d:aa:2e:4f:eb:
45:3f:7f:2f:4c:87:29:95:c0:5a:16:4b:5c:c0:08:
3d:43:85:39:b4:32:81:6b:9e:6b:0c:5d:1e:41:a5:
23:14:f4:b2:9f:29:90:cb:22:ca:26:f6:f3:d8:59:
12:0b:be:90:fa:f7:38:fc:80:9b:53:4f:7e:86:b0:
03:25:90:dd:90:b2:ae:ff:d1:77:6e:78:75:09:41:
09:0f:86:ad:09:84:4e:09:cb:e0:2e:c6:b6:70:8f:
1c:29:da:41:95:43:58:66:ab:77:30:ed:92:8c:80:
22:0e:b8:c2:50:dd:89:2f:eb:8e:c6:10:aa:ac:e1:
56:03:bb:b9:b9:3d:50:bb:e0:47:2e:92:80:17:06:
33:0d:d3:8b:94:04:e9:fc:ac:3e:55:f6:98:5e:96:
12:35:93:eb:15:a6:12:cb:60:98:f9:d1:af:65:d8:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:43:1C:AA:7A:11:72:6D:8F:BB:CD:DF:68:E8:F2:97:21:EB:8D
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f5:d4:be:c6:ea:67:08:91:0e:a1:3a:ed:90:24:ef:cf:ce:
55:40:8d:d3:8e:76:f2:98:4b:25:e3:56:09:0f:9c:8a:1e:8e:
72:79:1c:2f:fd:b3:38:23:55:66:7f:fe:55:35:c6:00:f8:03:
20:06:0c:06:81:a2:e4:b8:db:a9:c5:41:e1:7c:4c:dc:31:b4:
21:06:95:07:57:12:2f:c8:62:71:08:0a:90:52:4f:22:46:4c:
b6:9b:8a:5a:39:05:f8:74:b4:66:1e:bc:c8:f3:2a:96:b2:89:
58:0b:9a:2c:fc:a2:9d:d0:32:ea:a6:40:47:8f:ee:79:09:dd:
ad:f0:2c:68:b2:76:df:c2:8b:5e:0d:b8:47:ac:09:96:c8:e7:
98:4b:cc:be:3f:2a:cc:7a:3d:77:6c:70:d3:5f:15:ce:d8:85:
af:e5:44:f3:19:53:60:96:d7:ea:35:7c:0d:e4:f4:fa:c1:2c:
5b:8b:fc:72:0e:5a:4a:8f:7a:de:51:d5:d4:1f:79:c3:ed:2d:
23:4c:81:89:98:2a:14:d7:be:b1:25:8d:70:6f:0c:e4:cf:f7:
22:00:2f:01:9c:b9:23:bb:0b:93:de:06:22:87:c5:ab:ac:04:
8c:ef:97:40:b8:b5:93:b1:4e:43:db:58:7a:90:c3:78:5a:c1:
bc:01:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:14:03 2025 by rpki-client