Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: S6Gq/kfZQTIHAJGoAsO/8vT8dFw76aUaCmwmLhECNw0=
Subject key identifier: 80:4E:87:E7:5A:E3:06:8A:03:2E:AE:B9:A5:71:E7:58:4D:05:CF:6E
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0197B820F95AD49F22C9C28DA88637D662E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: zpMsZkLEgmY0HRbmOQsKbun3gk07we6Ep2SuhFRp4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f9:5a:d4:9f:22:c9:c2:8d:a8:86:37:d6:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=804e87e75ae3068a032eaeb9a571e7584d05cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:22:3e:db:87:f3:48:fa:a6:8b:90:c3:7d:
8b:65:7a:3b:9b:71:56:f1:56:74:fa:66:db:5d:60:
56:36:87:ef:ba:ae:2b:99:77:10:b0:04:2c:69:78:
7d:09:58:4b:db:9a:95:da:39:14:d3:2a:14:79:6e:
b0:e4:e1:75:c8:4f:42:78:e2:56:20:73:99:b8:cd:
43:15:f0:9f:68:e0:94:81:d6:d2:35:50:34:ec:fe:
85:4f:d6:45:36:65:60:14:5e:94:16:d7:8e:36:7e:
6b:25:8d:8f:01:47:65:0d:fc:00:c7:65:04:20:d2:
b9:ad:9d:92:13:16:60:34:ff:23:de:16:6b:be:b3:
9a:f5:b0:95:6f:93:b9:93:cd:4f:6c:b0:ae:38:31:
3c:ca:9a:28:d8:e8:95:a5:80:da:75:b9:d8:7f:4e:
b3:39:6b:bd:40:66:e6:ef:9f:c5:0e:0f:80:85:bb:
e5:6a:53:b7:3a:27:50:93:79:70:cc:cc:f2:57:a8:
4f:94:0a:78:63:e3:dd:65:c4:4a:40:99:34:18:66:
a6:77:cd:7c:41:08:46:77:70:36:1b:e1:ab:27:3a:
1c:ff:86:84:95:23:7c:9e:21:ed:96:78:8d:7f:0e:
75:7d:9d:a8:f9:f1:41:40:80:21:ab:a8:6d:4e:c8:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:87:E7:5A:E3:06:8A:03:2E:AE:B9:A5:71:E7:58:4D:05:CF:6E
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:b8:2f:84:43:48:b1:c9:1a:5d:ef:c2:0e:3f:c5:10:04:
21:87:cf:7e:40:50:88:05:71:ce:80:2a:55:6c:25:fa:fb:f3:
3e:11:d6:27:30:a1:9c:78:08:77:6b:de:ff:41:62:9d:f9:91:
d1:40:9c:f2:ff:0e:60:63:02:dd:45:00:99:68:3f:d3:2c:8b:
a8:16:3a:c2:dc:11:c6:2b:e4:d2:fe:a8:a2:41:ff:1f:12:b8:
0c:fe:a4:65:08:f0:29:46:81:4b:0b:b5:bf:73:20:78:57:f0:
28:f1:f5:78:e3:3e:36:c4:74:8f:12:d9:be:28:2b:16:58:c3:
7f:ee:ca:7d:ac:0c:49:cd:03:3f:ba:c7:71:86:0c:a0:c0:e2:
7b:bf:12:05:e4:31:bb:73:8b:c3:8e:bf:69:4f:59:3a:71:0e:
18:1a:02:18:b0:d8:33:7a:47:c1:7c:1a:a1:e1:49:aa:56:27:
7c:12:0e:fd:c9:bd:a9:ca:f2:de:43:27:b4:1a:4c:fc:c0:d5:
24:04:1c:e7:e5:05:79:38:cd:e0:d8:1d:42:53:72:12:5f:a2:
a6:68:af:05:55:8c:72:bc:2e:e2:61:86:dc:6d:ab:37:14:ea:
56:a0:91:d1:80:75:f3:93:3e:bc:83:46:13:10:b1:63:4a:84:
2e:8d:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:29 2025 by rpki-client