Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: eNLs9QDVBOuQisk31/7Rof/RktSbbtTh/uxt6Y5Uvwo=
Subject key identifier: 8B:0D:55:27:60:2B:72:E6:3F:3F:2E:F4:42:21:A2:BC:64:9A:0C:D0
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0197B6A08940D636CB40900713A7C439DBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: 5HUqtf0iy7+mi6CvFZI+A14uFNT0TcX7JnCXfDtx4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:89:40:d6:36:cb:40:90:07:13:a7:c4:39:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=8b0d5527602b72e63f3f2ef44221a2bc649a0cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:c7:dd:5a:89:be:50:f5:2e:71:24:c4:81:
1c:07:1b:b1:2d:82:d2:6b:9a:36:10:47:3a:c7:dc:
cb:27:53:d2:c8:7f:1d:9d:43:fd:ce:a4:ce:6a:f0:
d5:ad:70:2d:7f:65:24:49:81:17:e1:2d:9e:d0:3b:
32:4d:5f:95:2b:b7:a0:bf:6e:40:3f:2e:85:2e:5a:
4b:4c:1f:ff:c0:75:20:71:f1:94:af:d9:b5:2d:b2:
98:cd:0c:21:9a:f5:c8:2d:9b:9f:c5:d6:5c:99:6b:
9f:98:ab:3e:94:35:3f:2e:5b:6f:ce:e2:b9:ad:46:
6d:f4:f6:ca:b2:e3:19:f7:23:60:eb:46:5c:00:00:
ae:55:78:b7:c1:9a:02:ad:0b:c1:94:97:78:a1:76:
f3:60:69:de:22:e7:58:f1:62:7a:12:35:db:f4:f1:
4e:82:7f:0e:bf:15:0b:09:58:30:52:d3:9b:45:61:
fc:f1:74:5c:90:cd:67:8d:a6:83:d4:aa:da:c7:64:
c4:b3:fa:25:7c:b8:50:df:12:c5:fb:ab:8c:7b:60:
fd:02:6d:bc:bd:09:54:86:e8:e7:3a:34:0c:51:67:
66:4a:42:ac:25:7d:6a:f6:d2:d6:8d:b5:86:9c:09:
9f:97:d8:09:d5:be:ac:0a:ec:8e:35:58:2e:8b:16:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0D:55:27:60:2B:72:E6:3F:3F:2E:F4:42:21:A2:BC:64:9A:0C:D0
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:0c:d3:31:c6:8a:e5:ca:74:ac:72:26:00:60:a0:cb:79:
08:53:1f:d7:03:63:5a:c0:e9:61:d8:4d:be:dd:13:7e:d5:c7:
24:9b:6b:e2:b7:73:5f:db:86:b0:92:54:81:26:dc:95:8a:f6:
53:ce:1b:c6:12:b5:d3:9f:4b:a7:b2:77:99:5a:b8:ab:ab:c5:
1a:40:48:13:4c:4f:b0:4a:db:33:6d:c0:f6:3d:5f:37:89:09:
bd:b2:05:7d:fd:30:3b:7b:4d:bd:4f:d6:e6:ac:13:02:0b:33:
ee:0c:15:70:4b:41:19:8b:08:44:1a:74:1e:49:a7:cb:09:57:
c1:d6:80:d2:13:e7:21:38:89:28:19:be:36:32:b7:19:4d:3d:
45:46:b8:42:9a:74:07:16:d9:de:7e:8c:19:58:34:33:a0:91:
15:23:a8:a0:ec:d9:1a:7e:ff:6d:dc:52:bb:ab:02:5e:11:d3:
87:9d:41:84:2a:77:1f:5d:89:fa:35:3a:81:3d:27:eb:61:d0:
e0:1e:f1:3e:44:df:0e:6c:11:94:eb:7b:aa:af:c5:38:e4:c5:
05:1d:f2:7d:5f:73:7c:6d:2a:0f:b8:4e:b7:fb:2d:96:60:13:
f0:a2:ed:6d:8e:69:45:70:ac:95:cc:4a:7f:eb:27:1c:4e:b1:
a8:6f:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:17 2025 by rpki-client