Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: iRSQa+AecLvWoFbHnO98yh6d99G0/44yNqdwD3mqrfo=
Subject key identifier: BE:6D:EF:D8:8A:F1:69:B0:1D:61:5C:9D:17:D8:46:04:CD:DD:77:52
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 01974AB1856BA8E786E13977EBAA37F537CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:37 +0000
Manifest this update: Sat 07 Jun 2025 14:00:37 +0000
Manifest next update: Sun 08 Jun 2025 14:00:37 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: xv7r5P9boH57NeSVTYOkeHuPjbYYDzjEgDrYdiNBySc=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:85:6b:a8:e7:86:e1:39:77:eb:aa:37:f5:37:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jun 7 14:00:37 2025 GMT
Not After : Jun 8 14:00:37 2025 GMT
Subject: CN=be6defd88af169b01d615c9d17d84604cddd7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:37:1a:0a:22:a3:b5:19:79:c9:7e:63:14:
a1:d9:0b:d8:15:ee:ae:e7:a8:9a:fb:09:a0:ef:b6:
98:e6:a5:a7:6f:20:d9:cc:dd:d7:5f:5c:d6:df:aa:
3a:2d:43:8e:ec:98:62:7c:bc:17:0b:c9:db:25:70:
ba:bf:ba:b1:f2:7a:84:54:9d:b2:f6:ef:ea:34:a8:
14:2b:3a:47:30:40:51:42:53:dd:63:f9:8e:f2:e3:
30:39:2d:25:c7:79:f3:8c:d7:76:b0:d8:84:50:3e:
3a:ed:63:23:9a:8c:10:a9:45:57:d3:eb:58:f3:06:
86:b3:13:b5:a7:05:76:b7:c6:50:8d:fb:1c:41:2b:
0c:1c:da:fd:16:50:9d:46:e3:a1:5e:07:88:c7:89:
c3:e2:6b:56:f1:55:3d:02:43:b3:f8:b4:de:e5:73:
fd:99:73:cc:f0:bc:7a:9b:61:db:f3:5f:12:23:df:
53:d6:72:70:94:a0:d5:07:dd:74:71:73:41:43:d2:
9f:8a:a1:4a:3b:1c:9a:85:69:00:c2:52:65:74:fe:
e5:30:2b:65:b8:ae:95:b3:81:df:21:f7:46:6e:fa:
15:b5:9f:e4:63:36:f1:df:6b:53:25:78:4a:6a:aa:
c3:46:5b:40:01:ae:f8:d3:5d:80:7d:ed:c5:05:2d:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:EF:D8:8A:F1:69:B0:1D:61:5C:9D:17:D8:46:04:CD:DD:77:52
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:50:23:e3:66:fe:fa:19:cf:27:6c:10:ab:4e:84:e8:01:
66:bf:c7:f7:84:7f:a2:be:6c:ce:ff:47:d8:e4:17:b9:6a:d6:
ee:6d:ba:e9:bf:55:c3:51:10:cd:c0:95:e4:35:30:7f:46:4f:
4a:8a:55:e6:b2:71:c0:0b:dc:da:aa:71:99:10:63:6a:c3:ef:
ae:5e:ff:1c:ac:ea:87:b0:2e:5b:f0:5a:32:21:99:8b:8f:af:
ca:c7:4c:41:0e:83:69:db:99:4c:86:8c:f8:aa:96:dc:f9:37:
f6:e2:b1:b6:64:96:9e:49:6e:d7:d7:eb:ad:3d:5a:2d:dd:98:
88:09:3c:12:64:10:d2:e4:17:b5:78:d3:1d:28:2d:2a:7e:a7:
d2:af:25:f6:49:30:e8:dc:5e:8e:1f:39:e3:0a:e5:eb:67:57:
1a:c3:f0:2c:5d:99:0a:c3:ec:19:47:1b:95:6b:f8:ca:3a:a6:
16:07:93:24:50:a3:62:9c:ca:c0:3f:0c:d3:3b:bb:f4:a5:bc:
f3:35:5f:c8:e1:8c:39:38:98:e4:a9:50:6e:46:43:80:4d:e8:
5d:c2:f0:8a:16:9a:b6:12:ed:c9:1b:8b:03:2a:db:2d:55:8d:
f6:85:c3:9b:5a:12:fa:14:44:1d:8f:b6:63:92:84:40:66:08:
0c:f3:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:04 2025 by rpki-client