Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: Df9hNSxSuDh7sHlIHk7dJJ3aqaPRs8IAKOa5AMDPiHc=
Subject key identifier: 7E:C9:D8:37:D9:A0:18:2C:A2:5B:5C:EB:59:6A:80:2D:FA:FD:48:CF
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0197B96A973C3D2877E54192BBB61DB714F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 15DC
Signing time: Sun 29 Jun 2025 02:00:59 +0000
Manifest this update: Sun 29 Jun 2025 02:00:59 +0000
Manifest next update: Mon 30 Jun 2025 02:00:59 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: i5Q4KGKihM9s8NXhtSnpyh/hW7udoQRUJALTpe2YxYw=)
2: DLqkJtVUmV3t_NSFK9gSKIls7d0.roa (hash: mC4NzL71O1LVPsjh1kWalWyRrj4+h6csfx67YmiitPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:97:3c:3d:28:77:e5:41:92:bb:b6:1d:b7:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jun 29 02:00:59 2025 GMT
Not After : Jun 30 02:00:59 2025 GMT
Subject: CN=7ec9d837d9a0182ca25b5ceb596a802dfafd48cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:07:53:46:6b:f9:f5:d5:2e:74:2c:1a:c2:
d3:32:82:2c:d1:49:4d:a0:6c:c7:d1:f4:71:3d:d7:
95:18:77:09:82:1f:0e:38:6e:f5:88:ef:10:3a:c3:
cb:69:ee:41:b7:2f:28:2f:f5:7b:04:5e:7c:95:0c:
36:03:51:74:3b:e0:3a:14:84:33:0b:02:46:da:fb:
01:9c:49:5d:16:d1:91:0f:d7:81:cb:dc:91:0d:b5:
70:50:64:78:a3:9d:92:ae:9c:00:dd:d9:a6:6b:91:
33:e3:0b:3a:cc:14:df:a4:b4:a7:60:4c:13:85:0c:
ec:64:e4:81:b6:1a:43:7f:b2:59:50:a9:0f:5d:3b:
32:19:ba:94:e3:7a:a7:4f:1c:19:21:50:3e:92:87:
f7:ca:77:23:8d:0e:32:c2:84:64:40:e0:d4:ee:32:
53:a8:53:fb:43:be:05:da:65:d4:2f:6a:fb:00:0c:
94:bb:75:2b:c1:b8:09:2c:2e:0d:1d:cf:67:6a:67:
cc:ff:0e:cf:9c:b5:d6:8c:85:17:c7:c5:b3:56:dc:
89:8a:d6:f4:92:4c:15:2b:ff:09:c0:0a:83:4f:70:
27:d8:df:65:0c:fe:0f:a4:d1:0f:0a:82:27:76:3a:
35:79:70:50:56:44:87:85:11:a1:a2:b0:96:a3:30:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:D8:37:D9:A0:18:2C:A2:5B:5C:EB:59:6A:80:2D:FA:FD:48:CF
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d3:e1:a6:58:0c:35:e5:51:ab:fc:d1:3b:75:9d:e8:e5:e0:
e5:4d:78:cb:5f:4d:e1:8e:ad:cc:03:49:f4:61:65:ec:2a:23:
0d:44:1a:a2:36:d4:f3:8d:6b:40:83:60:e1:9a:0c:17:2d:35:
65:18:4f:52:b1:91:67:17:56:df:fb:68:ea:98:cd:87:2f:0b:
66:6b:c3:10:34:93:d5:98:1a:97:ed:77:62:88:3a:1c:13:7d:
e6:f1:79:36:cd:2b:2f:81:89:a4:82:7e:c7:b8:0d:84:b8:23:
b5:b1:1c:64:5a:bd:04:0f:fb:1e:6f:a0:70:c2:fb:5a:49:00:
fa:2e:92:29:cf:b9:b0:eb:88:a1:93:e6:48:b8:14:49:1f:9a:
3b:bd:fb:29:76:69:b8:d0:05:52:ae:fb:d3:ef:db:fb:43:0f:
99:bf:13:68:48:e7:6f:80:c3:2e:6f:cd:50:00:8a:b3:66:ee:
e2:f8:82:e8:fc:3e:d0:60:50:5a:af:45:a3:4d:45:e7:03:46:
97:10:36:34:6b:16:08:30:d6:90:ef:16:8e:c6:a3:04:2e:7d:
d9:87:18:3d:c2:8f:50:5d:d2:bd:bf:63:c0:45:61:e1:b0:f8:
f8:d7:a4:4e:96:67:61:66:bb:bb:23:75:5f:17:40:d4:74:75:
2e:52:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:27 2025 by rpki-client