Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier: PqbKW/n8D7UEIjhoo4C3ZfIID+YxVJjkLbZAwiz6Pa4=
Subject key identifier: 6A:05:1D:5B:94:C1:67:55:34:39:4D:74:CE:6F:03:FD:00:CC:A9:F4
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019739500E6B7CAFD5FDFD528205A494E61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number: 10AE
Signing time: Wed 04 Jun 2025 05:00:37 +0000
Manifest this update: Wed 04 Jun 2025 05:00:37 +0000
Manifest next update: Thu 05 Jun 2025 05:00:37 +0000
Files and hashes: 1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: 0zNrMAzZSKpNVRvSwcknhlzlvfpLpyyuj/1co+zzrQg=)
2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:0e:6b:7c:af:d5:fd:fd:52:82:05:a4:94:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Jun 4 05:00:37 2025 GMT
Not After : Jun 5 05:00:37 2025 GMT
Subject: CN=6a051d5b94c1675534394d74ce6f03fd00cca9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:6b:45:13:7c:c0:a8:e9:e8:d0:da:89:d8:
fb:d2:f4:ad:b4:9e:cd:96:ef:e9:0b:15:5e:e5:09:
6a:4c:01:32:c3:42:e6:f8:ca:d3:bb:75:8f:c4:15:
76:5b:4b:c6:c6:fd:76:c3:d8:73:fe:fb:49:a0:2a:
0b:f5:d0:78:98:2b:fe:41:a0:04:18:af:39:2a:82:
a2:f2:3f:57:01:c2:fe:72:a3:e8:ab:28:34:20:ac:
c2:02:b2:fa:97:b5:11:6c:78:a9:7c:d6:59:d6:e5:
07:d4:d7:4f:b1:ea:6b:28:ca:e5:fe:d9:81:ea:71:
14:b5:06:d8:a4:4a:7e:cc:ca:0a:3b:d9:ea:71:7c:
94:b5:d9:8e:33:a5:8d:11:c2:81:57:1b:1a:47:bd:
8b:02:61:5c:6d:fe:a7:69:28:22:05:2e:57:86:76:
4d:9c:b9:8b:e2:c4:40:72:28:49:f0:ee:d4:79:71:
49:09:c5:5a:c1:53:48:8d:cf:96:01:19:d0:59:9c:
cd:67:32:28:ff:16:29:cb:5a:8d:84:62:e1:5f:5c:
f1:5a:d4:30:04:22:37:41:45:f4:68:1b:f5:54:c7:
b9:f7:26:5d:dd:68:bc:f6:f1:b6:0f:c2:19:a1:9c:
79:2a:d9:24:f3:03:94:aa:f2:f7:5a:fc:12:80:3e:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:1D:5B:94:C1:67:55:34:39:4D:74:CE:6F:03:FD:00:CC:A9:F4
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:9b:08:67:ae:42:94:56:20:bd:7e:f7:09:2f:b8:d6:2c:
9b:5d:d7:9e:92:10:6c:8f:b9:29:76:5e:08:11:04:ab:2b:9b:
69:b4:50:9b:fd:6c:43:36:10:93:0a:41:67:d0:7f:df:fc:57:
9c:19:64:1b:d1:a1:e8:1e:62:4a:4e:c9:60:03:78:dc:8f:0c:
7f:ed:bf:87:70:41:7e:60:e1:df:53:ee:ca:9d:8b:05:fa:d1:
7c:eb:d1:d9:57:c5:a8:55:27:9f:6a:bc:34:76:18:8f:07:08:
be:09:2c:09:9e:95:4d:d6:f6:4f:b2:aa:4c:98:12:d4:46:72:
7c:59:36:9a:f7:93:a2:fd:b6:f6:35:e7:b9:58:12:bb:d4:94:
f3:52:18:e2:cf:4e:c9:ab:bb:a3:03:84:51:f7:96:07:97:e7:
af:3e:84:aa:a8:fa:d2:4f:b9:71:a0:84:9d:18:f1:eb:18:00:
49:21:9a:fe:04:99:99:33:c0:46:51:f5:0c:ae:eb:05:56:82:
a2:96:0d:a1:a4:12:22:be:b5:ad:31:dc:69:94:ca:ec:00:a2:
c6:92:40:67:40:15:68:7b:3c:7c:12:96:5f:b3:49:b8:89:31:
3c:65:a3:a0:fe:0c:e6:10:31:48:d6:ef:b8:f8:18:90:43:36:
fe:f8:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:57 2025 by rpki-client