Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: J8TV+L7L/pNjIkwzimce1NlGzq3vq2FJ8GAANAkM9R4=
Subject key identifier: F9:F0:5F:A1:C5:21:93:C9:50:59:68:C8:56:F2:7F:B1:04:6D:E5:E8
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 01974C69AE0F8A5134C4383477F985933F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 22:01:23 +0000
Manifest this update: Sat 07 Jun 2025 22:01:23 +0000
Manifest next update: Sun 08 Jun 2025 22:01:23 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: zJSkrCZ7mff3K48ATShjsK4gEN1RqdALLUWe5pV216I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:ae:0f:8a:51:34:c4:38:34:77:f9:85:93:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jun 7 22:01:23 2025 GMT
Not After : Jun 8 22:01:23 2025 GMT
Subject: CN=f9f05fa1c52193c9505968c856f27fb1046de5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:36:07:b7:a6:85:90:e0:79:13:97:4b:e0:
fb:82:f6:20:43:4c:7e:00:de:04:bd:db:ce:26:af:
eb:01:e0:a1:96:17:3d:81:8e:03:32:5f:64:80:2b:
00:86:0f:1c:e2:c2:95:46:27:ac:46:ac:55:de:5b:
61:60:46:4a:f4:9d:42:a4:be:c8:d6:81:21:06:a9:
dc:39:50:4d:07:83:d0:ec:9e:86:99:12:29:28:80:
cd:fb:68:ba:eb:db:79:5b:c1:ea:32:f3:31:dd:5e:
23:dc:68:33:2d:38:b5:55:48:85:e7:e4:e9:a4:4d:
9e:e0:f6:5f:7c:92:fc:63:b3:41:fe:0d:8f:79:26:
b4:07:03:08:ad:f8:16:05:5c:48:17:e8:7c:e0:c8:
25:c8:1d:fe:00:57:56:0c:95:51:5e:ec:2f:28:26:
7d:0a:85:9e:f9:64:9a:d3:c0:0a:fe:ce:15:e4:46:
44:19:e2:10:95:1c:cc:f6:4c:eb:cd:f1:0b:d0:51:
1d:af:0d:d3:41:bd:94:a5:93:a9:53:c2:52:a8:02:
bd:fb:c9:62:d8:22:f9:d5:47:64:a3:34:79:f7:aa:
4f:16:9a:85:b9:5c:45:0d:fd:2a:c3:2c:ee:ba:6e:
7e:9e:1f:94:60:8a:7b:be:e6:86:0b:dd:f2:c1:fb:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:5F:A1:C5:21:93:C9:50:59:68:C8:56:F2:7F:B1:04:6D:E5:E8
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1f:71:92:c6:6c:2c:23:6d:19:1c:7f:94:ef:83:32:6e:b0:
82:3b:32:3f:12:9b:f7:ba:d2:9a:aa:54:20:e9:b8:f1:30:d8:
cd:34:7f:68:5a:a0:0f:e5:04:12:c6:3f:18:93:d7:78:95:4f:
f5:99:84:90:a1:8e:4f:01:b9:99:81:f2:80:ea:ae:10:b8:9a:
e5:c8:64:47:69:04:9b:89:01:88:08:f5:89:8c:92:2b:20:5b:
28:c7:9f:9a:98:b6:1f:9c:3b:1b:a1:94:07:64:44:5a:28:d9:
69:3a:91:55:67:57:0b:6c:b1:b2:3a:55:12:da:62:99:bf:7c:
a0:d9:e5:7a:ce:13:18:9b:f4:a8:6b:05:e6:b6:f4:9e:31:ee:
99:30:df:81:e1:fa:f9:97:0e:e0:2e:a8:9a:76:60:ca:1f:f5:
f0:ef:4b:8a:70:a7:5e:66:48:a4:3c:a9:6c:a6:ee:25:2f:ea:
ad:a9:a2:7f:5d:0f:fe:4d:9a:63:db:54:4d:97:49:5a:ae:3a:
4d:37:4a:9b:9a:88:5f:24:fc:5c:bd:27:7d:c2:31:d4:db:a0:
e7:68:d7:7e:e1:f3:a2:18:84:1e:7b:29:e8:92:c7:8c:0a:60:
72:97:48:75:65:ff:6e:97:b6:9d:09:f8:ae:1f:3c:2e:00:52:
58:00:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:58:53 2025 by rpki-client