Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: GSHP0OHQR8kFEQC1GiInLWVSBH77Gox7CfL0oY1OlI8=
Subject key identifier: 20:2A:9D:C4:C9:C1:41:1D:9A:92:EE:F9:28:E1:24:34:4F:38:75:4E
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0197526B53A85F7C6F5B96524F92A36876A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 02:00:54 +0000
Manifest this update: Mon 09 Jun 2025 02:00:54 +0000
Manifest next update: Tue 10 Jun 2025 02:00:54 +0000
Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: tusdtUkipUun/fvsZdz6K8nowjkhl8O84oRwUIp1WvY=)
3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:53:a8:5f:7c:6f:5b:96:52:4f:92:a3:68:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jun 9 02:00:54 2025 GMT
Not After : Jun 10 02:00:54 2025 GMT
Subject: CN=202a9dc4c9c1411d9a92eef928e124344f38754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:3a:01:37:f1:31:45:e4:d4:0a:79:f0:49:
4c:bf:86:dd:08:4c:41:2c:50:b2:e8:64:b5:cc:20:
49:74:7d:45:f4:33:bf:7d:a0:90:d7:29:85:58:4c:
a5:b1:31:c0:07:34:3e:3d:48:67:da:51:ff:39:93:
2b:e6:78:df:2f:b0:b9:60:76:07:1a:4a:58:1d:f3:
3b:63:9c:9e:30:12:24:df:9b:7c:20:56:bf:55:fd:
5b:29:3b:06:97:24:30:76:8c:0f:65:d7:68:74:e0:
81:dd:7f:72:00:43:71:a4:21:09:62:62:c9:4b:20:
80:34:91:85:0a:c2:b8:4a:8e:c8:95:5f:2d:13:73:
65:78:a8:34:d7:22:ba:40:1b:6a:09:fa:e9:58:08:
63:03:c9:77:c7:31:50:33:39:3e:0d:8f:fd:2c:3c:
53:02:75:08:6d:59:59:5c:fd:68:19:62:93:a7:45:
7f:39:ec:5b:75:69:e4:30:f2:c2:7d:42:46:d2:4d:
74:72:ab:56:39:8d:95:37:ed:d7:45:b2:8f:3b:c3:
c4:86:15:62:a5:36:f2:48:6f:05:ce:0f:29:78:ba:
1b:3d:a9:e7:38:40:81:96:c1:5e:01:b2:c0:c4:26:
06:b7:12:70:5f:cd:b8:48:43:5e:1d:db:fb:84:ad:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:9D:C4:C9:C1:41:1D:9A:92:EE:F9:28:E1:24:34:4F:38:75:4E
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:2e:69:de:c6:13:02:59:ac:81:66:6c:ec:f5:eb:b0:4e:
19:76:ee:9c:22:e1:c4:04:19:02:6d:73:0e:04:49:92:53:13:
98:5e:96:ac:6b:0b:22:72:ee:5c:da:7f:29:ad:4f:e4:09:8d:
8a:b7:74:15:d2:ac:47:30:04:37:e5:4c:67:e9:1f:68:ac:af:
d7:32:4f:ce:05:ac:73:3c:cf:1e:0d:48:2a:42:4d:e3:64:24:
c7:1c:19:e6:cb:3d:2a:54:1e:6a:8e:0b:b5:a7:1c:90:c7:a5:
96:52:3b:86:fc:55:f2:2c:fc:e9:a2:73:8b:46:db:af:bd:fd:
81:45:55:39:1c:3f:85:f2:85:f8:92:d8:f5:92:36:06:4e:c7:
21:0a:d8:d8:9e:0f:e8:ce:f0:12:d9:b7:06:99:b3:c2:ba:57:
0a:40:ee:93:52:bf:00:74:4c:af:5a:77:2a:6f:7b:22:a0:80:
a8:5c:c8:85:81:83:f2:43:c5:ca:4f:29:64:53:94:78:fa:f5:
b6:ef:3e:88:d2:91:35:19:f8:91:0c:0b:d5:b2:89:97:82:56:
c7:f4:69:20:a6:ee:ea:d2:e3:02:1e:d0:6c:e5:b7:bc:97:f4:
b8:b8:8c:3e:cb:0e:f2:2c:09:ef:fb:2e:93:9e:0c:e5:83:9b:
88:8f:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:15 2025 by rpki-client