Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: pz9KD1+I6lTMhb+B4GBinQWiuxYsuiIWfCeABKEB0IA=
Subject key identifier: 13:59:BA:09:0B:ED:BA:7B:44:6C:97:0B:9F:AE:C3:82:34:7B:B1:36
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01976CCFBDB8AB6D4F2331E40B9558EB3914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0A78
Signing time: Sat 14 Jun 2025 05:00:43 +0000
Manifest this update: Sat 14 Jun 2025 05:00:43 +0000
Manifest next update: Sun 15 Jun 2025 05:00:43 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: 9qq/0Wc3JpEFp2QeI0KK+sOLAd4lnes1RmHkcLL9cfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:bd:b8:ab:6d:4f:23:31:e4:0b:95:58:eb:39:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jun 14 05:00:43 2025 GMT
Not After : Jun 15 05:00:43 2025 GMT
Subject: CN=1359ba090bedba7b446c970b9faec382347bb136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:7a:c7:45:4c:6a:8b:c3:41:7f:bb:80:82:
b1:f5:ea:5d:62:12:cd:4d:76:fb:20:2b:f5:ba:a0:
95:09:c3:15:c4:fe:f9:ce:04:ff:a3:65:30:1e:f4:
4e:15:c1:0f:36:f6:e1:ca:9e:aa:44:26:08:96:16:
3e:8d:37:bf:9d:b3:83:38:6b:38:ab:66:9d:1a:30:
85:fc:97:ff:19:0e:1a:16:fc:1f:68:8c:d4:ab:c3:
c5:13:60:e9:92:2a:aa:00:f2:e5:c2:54:3c:5a:63:
5e:eb:d6:9a:8e:22:24:7a:e4:71:3c:fd:b6:f5:c2:
c6:b7:0f:00:41:bc:fe:1d:80:ba:c8:34:6d:52:33:
88:c3:4c:ba:db:79:37:89:2e:89:14:f7:cc:33:7e:
9e:fb:16:6c:37:80:ac:95:46:88:a3:3d:aa:04:5a:
ec:e5:d0:f3:e1:a4:25:80:da:ed:97:65:48:48:46:
68:fe:a9:66:3d:5c:63:54:6c:d8:f6:00:95:c3:7d:
1a:69:a1:53:95:fd:3f:b8:e3:28:6b:de:96:40:17:
b3:23:cb:03:cd:4c:d0:8e:06:f9:8c:15:e0:89:0c:
e6:b6:20:04:d5:c8:0f:f0:bc:c7:57:b9:f0:39:8f:
a2:fe:7b:10:fc:8d:b9:a4:8b:d9:e9:23:f1:33:a3:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:BA:09:0B:ED:BA:7B:44:6C:97:0B:9F:AE:C3:82:34:7B:B1:36
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f2:36:9c:57:f5:12:91:4d:4b:f5:a4:fe:1f:7f:7b:65:39:
66:e3:9e:8b:d6:68:ed:90:d9:33:8b:40:f7:8b:40:e7:86:da:
46:17:ae:68:51:9e:ed:ba:1a:28:51:71:5e:fa:18:c8:62:c1:
54:f0:71:ad:47:64:78:e6:63:2c:5b:3e:21:83:f7:06:65:bb:
12:f2:42:ff:a7:f7:c3:f3:c8:8e:0d:94:ef:7f:4d:e9:f6:c6:
a5:b2:63:e9:72:3f:dc:25:25:b5:b4:44:39:8b:2e:aa:4e:10:
60:84:ce:80:aa:d0:1a:05:1e:32:ea:8d:d6:5a:a9:e9:e2:a4:
de:14:c0:1b:0a:80:1d:a3:bb:88:94:36:8f:dd:c8:7c:e0:0a:
b6:b7:3b:15:ed:18:7a:ba:c4:14:60:88:24:fd:a0:bd:f1:8f:
45:05:5e:6a:7b:b4:18:25:2b:85:4f:37:e0:0e:a9:f8:5a:a9:
ba:86:2d:b6:56:99:59:ee:82:72:01:14:7f:26:ec:f0:e9:66:
6a:19:3a:94:99:7d:39:fe:03:72:b6:70:27:b2:fa:0d:df:31:
25:dc:bb:8a:14:ce:7e:d6:b2:89:74:01:b8:b5:47:f0:c8:d5:
ab:3a:c3:6e:79:cc:1c:da:26:04:78:9e:00:bd:76:df:c3:76:
92:f3:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:36:00 2025 by rpki-client