Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: rbMMX3v2P9OgAZpJpzHZTChJLs+PdoPpPOruk4azH5A=
Subject key identifier: EF:FC:AF:6D:97:7F:FF:15:81:5E:7E:27:B7:89:67:FF:59:03:8C:BC
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 01974C320587B60B99D705E53E9DA7EC3712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 033E
Signing time: Sat 07 Jun 2025 21:00:35 +0000
Manifest this update: Sat 07 Jun 2025 21:00:35 +0000
Manifest next update: Sun 08 Jun 2025 21:00:35 +0000
Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: lmGs75m69oPkUTUYg3CDKyres0JhHg4vGsQLL5V1g8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:05:87:b6:0b:99:d7:05:e5:3e:9d:a7:ec:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Jun 7 21:00:35 2025 GMT
Not After : Jun 8 21:00:35 2025 GMT
Subject: CN=effcaf6d977fff15815e7e27b78967ff59038cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:d4:9a:18:7f:ae:d1:c0:0c:c8:22:0e:4f:
3c:de:c0:cc:10:00:7a:57:a4:95:1a:b9:7e:09:8b:
a3:a3:e6:d2:04:0a:a4:52:a8:d5:e1:6f:73:2a:b3:
6f:f0:b9:8f:17:b1:5a:a0:d8:6c:8e:c4:18:69:da:
ad:9b:8f:94:b8:bd:b7:13:9b:85:c6:5b:d9:40:9d:
12:ae:43:ab:9e:30:76:31:eb:27:58:1c:3b:53:2b:
61:d1:3e:e1:54:37:dd:9a:55:25:03:71:5a:30:19:
b2:1c:1a:49:9c:24:4a:a4:a2:63:28:8a:d9:0c:44:
a8:7d:2b:ae:21:4a:34:22:d7:c0:bf:d0:cb:fa:66:
d7:a8:f4:2d:66:62:55:9e:65:4f:f1:1b:07:4b:23:
61:1c:90:12:07:92:f1:c5:39:a2:f1:6e:a8:ae:70:
27:e7:8a:1a:f4:5d:02:d4:7d:b6:09:40:7a:90:29:
8b:36:6b:ca:bc:e7:a9:c9:0a:51:99:49:5c:62:c4:
35:de:a6:07:c8:20:98:15:52:f1:d4:60:36:ac:d5:
cd:1a:1d:e0:74:d0:2e:d4:02:ff:61:23:91:b0:35:
48:27:60:6f:93:a4:64:7c:81:77:8e:81:ed:61:28:
c1:45:9d:be:9c:31:6c:19:8b:2c:5c:23:bb:38:d7:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:AF:6D:97:7F:FF:15:81:5E:7E:27:B7:89:67:FF:59:03:8C:BC
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:29:ad:34:ab:46:88:3c:cb:00:3b:1f:5a:e0:0a:86:17:
55:64:32:8e:df:92:33:95:d6:08:04:9e:1a:d3:a4:69:aa:d0:
f4:20:03:69:cf:0b:21:cf:7e:a3:1f:60:8b:fd:93:23:b3:26:
e2:4c:e7:b9:62:2a:64:2e:37:e5:d6:0a:ea:79:1a:71:ec:6b:
a3:fd:0c:f9:75:45:2d:7b:9b:87:0d:03:55:14:7e:12:73:f3:
94:15:fe:18:75:03:1b:31:42:b1:66:0e:4b:cb:66:22:78:d1:
32:e8:0d:89:0f:ba:ff:8c:9a:de:0b:35:92:a9:96:b3:cf:85:
ec:50:58:a7:50:40:98:95:78:76:74:83:61:2d:68:82:4f:cb:
35:7c:62:8c:28:4b:7d:48:35:70:ea:76:3e:00:cd:f6:1b:93:
ae:89:7c:fb:d7:4f:b9:74:9e:d3:c9:55:2b:c1:04:cd:ab:2b:
55:3d:94:50:51:a7:08:a5:23:16:4a:4e:37:88:e5:e3:cd:da:
c9:f4:d0:be:24:61:04:1f:5f:b0:4e:2c:8b:0b:c3:d5:18:a8:
11:5b:b7:24:37:76:fe:83:7d:8d:99:69:86:f4:89:45:85:ab:
40:08:55:17:35:6b:dc:e3:9d:e5:52:7d:a6:e0:af:3c:4e:fa:
d6:87:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:36 2025 by rpki-client