Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: dP7Mu0Ec827891E/npDbSvVdWu4KCzODCbatCXmePLw=
Subject key identifier: 84:14:BD:E8:06:DC:EC:5F:94:06:28:D6:89:52:6A:0B:65:AB:90:76
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01974B8D454F76983144C5E1FFBFF2BAB997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0C63
Signing time: Sat 07 Jun 2025 18:00:38 +0000
Manifest this update: Sat 07 Jun 2025 18:00:38 +0000
Manifest next update: Sun 08 Jun 2025 18:00:38 +0000
Files and hashes: 1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: 3C7vdqiHGQ39ub62Gxaoid6NFGZGkXyMaSEwrP8dyHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:45:4f:76:98:31:44:c5:e1:ff:bf:f2:ba:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jun 7 18:00:38 2025 GMT
Not After : Jun 8 18:00:38 2025 GMT
Subject: CN=8414bde806dcec5f940628d689526a0b65ab9076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:ee:dc:89:73:06:e2:32:02:8c:8c:c4:e1:
2d:5f:37:88:f4:8c:3a:29:cb:c3:fa:dd:d3:fa:37:
23:d1:e7:55:c3:80:97:ef:29:d6:6c:f4:29:4e:0f:
da:a7:0d:64:03:09:fe:d0:1b:ec:66:15:c9:92:20:
81:f2:a2:da:af:75:eb:8e:5a:87:24:0a:c8:2b:f3:
93:57:a4:93:f5:76:e4:52:b2:eb:a8:31:0c:76:89:
77:66:76:c2:2f:5f:6c:38:52:ab:85:eb:a4:fc:74:
c2:ea:c7:e0:d8:a1:1d:3a:2e:9e:7e:a5:a2:2f:4d:
06:1e:a9:3c:27:40:33:80:0b:c2:66:28:7e:00:30:
42:13:82:99:d2:68:3d:1c:f7:b9:64:02:4e:48:5e:
d9:97:e3:be:e2:04:e6:79:af:78:5b:41:e4:a8:81:
50:5e:aa:06:e9:af:09:34:85:04:88:fd:f7:32:10:
63:97:59:e1:b6:f7:37:30:dc:c6:4f:17:7a:53:77:
b2:b7:6c:fa:a3:fe:40:0f:70:63:ae:cf:86:4b:54:
ba:a1:b2:e9:b2:bd:9b:83:02:39:88:fd:43:c3:ca:
bd:e8:fd:eb:fd:61:aa:77:04:36:66:45:2e:e2:53:
4e:c6:23:f6:72:c5:26:f5:c8:df:7e:0d:48:60:be:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:BD:E8:06:DC:EC:5F:94:06:28:D6:89:52:6A:0B:65:AB:90:76
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:d0:28:5b:4e:c6:1d:c3:13:25:87:fc:bf:03:64:ff:0f:
5f:4a:ed:00:f7:cd:89:bc:18:8a:15:b8:bb:34:75:20:b7:21:
ab:22:be:95:db:6d:d4:6f:56:42:31:b6:c9:1c:90:c6:13:f3:
ec:82:62:a5:e3:d1:76:d8:56:81:3a:4d:f6:43:d6:f0:6f:a6:
fb:64:76:f6:c2:0d:45:fe:29:fd:a6:7c:11:a3:ce:c4:f9:22:
2e:cc:5c:19:17:03:8e:2d:79:58:83:bc:8b:cd:32:5f:74:c8:
10:fd:bd:90:f0:13:1d:b1:a4:7f:53:11:97:26:14:d3:3c:69:
f6:a4:1a:85:4e:7d:a5:95:a5:22:a5:d9:c7:72:c2:0a:3e:41:
cd:e5:f0:2c:9b:66:28:86:73:f8:93:c0:c9:f7:7f:fc:87:a1:
b3:9b:62:bd:1b:44:88:fb:60:79:3d:12:e2:6d:30:f6:5e:3c:
53:cc:2e:54:f0:14:66:b4:71:d7:bc:c1:29:ad:b2:01:c3:59:
a4:8b:e3:8e:b7:7a:70:4f:41:c9:b9:55:29:41:5a:b4:0f:84:
ed:fd:ae:26:d2:2f:67:6c:df:63:bf:ea:7d:3a:04:0a:8b:10:
83:a1:85:04:17:14:3e:c5:99:bf:b9:ef:c5:ec:49:dc:e1:03:
1f:1c:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:17 2025 by rpki-client