Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: rvGL4P4vseDoVV9ldScDu1549DSo8XuucTtjdORhbWk=
Subject key identifier: DB:39:DE:58:C0:F4:76:9A:D2:BD:2D:39:E8:93:EB:4E:64:1F:E4:1B
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 0197B6A0E5A37FFD7B2911A9A1E74C0A541C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 049E
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: IVKbsfhFLhHl0IbAmOBD9GZqfcA74eJJxNc4hO4JLW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e5:a3:7f:fd:7b:29:11:a9:a1:e7:4c:0a:54:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=db39de58c0f4769ad2bd2d39e893eb4e641fe41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:3b:c3:2d:b5:13:d0:c2:f4:32:94:5d:f7:
f5:6b:8f:6a:07:b2:31:70:90:40:5c:d6:21:fd:65:
df:f0:0d:a5:fd:ba:d9:2e:ab:d2:04:e4:d2:84:d2:
f8:8d:cc:b0:87:5f:0d:49:9a:63:12:b1:9d:5a:bc:
7e:41:1c:6e:2c:88:93:7a:9b:c1:5b:18:4e:a6:dd:
97:1b:3f:93:84:50:e7:df:15:fb:f2:ff:f7:83:57:
23:24:ba:0f:e4:75:1e:9a:ea:b4:ec:86:fb:11:0d:
c9:c6:8d:3e:03:b0:37:ad:5c:87:f1:03:92:8f:e9:
72:01:c1:67:4c:fc:2c:8f:95:44:ad:44:4f:b6:73:
e9:19:a8:8c:af:1d:71:a5:f3:18:d4:7c:23:dc:98:
3d:f8:1f:b6:b6:31:fc:e5:d0:b1:dd:d8:91:ae:98:
e3:5a:b6:dd:17:29:83:1e:a3:c2:56:2a:9e:5d:49:
b3:65:cb:ab:3b:7c:70:ca:d9:75:d3:43:b4:40:ec:
06:6e:91:3b:80:73:14:7b:9a:88:40:00:a8:ed:eb:
c8:2a:0d:c2:1d:6d:16:fe:0b:4b:6c:f9:ee:01:f0:
d2:60:f1:3e:51:5f:9f:2c:80:d7:e4:24:72:03:b1:
aa:4a:3e:fe:59:98:6b:82:c2:aa:41:1a:47:28:68:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:DE:58:C0:F4:76:9A:D2:BD:2D:39:E8:93:EB:4E:64:1F:E4:1B
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:4c:b0:f9:22:67:26:68:4e:b9:0d:f4:81:c0:00:44:79:
52:6a:fe:9d:a4:94:9e:c8:8f:90:ee:2f:b9:0f:b9:2d:07:6b:
a6:f1:8f:ea:d1:cc:b5:0a:48:b1:e3:74:7c:4d:97:e6:03:73:
1a:22:0d:8e:ae:90:03:15:ed:62:72:a0:f6:86:06:ae:a6:42:
e3:83:fa:74:f5:2b:85:ff:88:8a:4b:b5:22:7d:e2:32:ad:88:
e2:2e:6d:fd:1a:79:09:2b:24:a6:21:56:6d:5e:d0:0a:0e:94:
2d:c5:64:c5:3a:4e:a7:40:7b:2f:58:6d:6d:b9:47:bd:b9:6c:
f6:bf:fd:06:8b:ce:8e:61:5a:6e:16:8f:a2:fe:69:6c:14:5c:
1e:0d:c6:eb:c9:f4:78:3e:c2:60:a4:d0:84:60:e2:c4:0d:78:
62:46:1a:90:04:7e:fb:d7:cd:27:a1:e8:48:5b:8b:60:57:9f:
04:8e:1f:ae:34:65:88:22:d9:14:ad:87:43:b8:1f:f7:66:48:
ef:61:d5:b4:46:f7:cf:1e:b6:97:b7:f6:6f:39:e7:42:d4:66:
ef:8e:dd:e5:4e:fb:f9:52:37:a0:4c:56:53:70:07:df:6b:7c:
23:e6:4a:03:db:99:77:28:52:d1:df:d9:ed:7f:a2:e7:38:cc:
08:06:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:21 2025 by rpki-client