Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: ZWO2EkIw8qxAPts3TujiAAqu7XsllNnbOYPNp3kmW0E=
Subject key identifier: 6D:07:A5:5F:91:E1:65:42:FB:11:84:42:E8:16:EE:DA:07:95:07:72
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 0196C2A6CCFEF4D77735ED5EFDC68B73CEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 04:00:33 +0000
Manifest this update: Mon 12 May 2025 04:00:33 +0000
Manifest next update: Tue 13 May 2025 04:00:33 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: s4HTQzlmRaf+deSiF/mENklw2/ZOpCXnNfUbPMLQWO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:cc:fe:f4:d7:77:35:ed:5e:fd:c6:8b:73:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: May 12 04:00:33 2025 GMT
Not After : May 13 04:00:33 2025 GMT
Subject: CN=6d07a55f91e16542fb118442e816eeda07950772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:47:a7:68:22:cd:75:3f:36:cc:0c:ae:aa:
6b:ef:ff:39:30:70:4f:f9:c6:1a:29:27:b1:fa:ec:
90:b4:c0:39:d6:fe:27:e1:f9:e2:07:d2:35:9d:36:
c8:8f:90:19:d4:29:39:1d:2a:2c:f1:27:07:c7:4d:
89:66:b5:5b:6e:b4:8d:61:05:28:3c:36:3d:af:bc:
82:b4:33:e1:c9:b2:14:aa:eb:44:83:46:a4:d4:1b:
27:38:3b:f7:a4:c5:a2:2c:7e:6f:9b:94:02:06:f9:
30:13:39:dc:32:fe:46:86:b1:8e:ba:b5:ca:47:c3:
cb:a8:9d:09:34:08:32:fd:3f:97:61:f2:49:d3:54:
cf:68:29:4d:d5:0d:2e:2f:9e:e9:0f:29:4e:96:32:
50:e4:f3:a5:7a:e5:11:a5:f0:8a:7e:56:7a:ee:c0:
d3:ab:2d:cb:0f:e4:ca:1c:b6:ea:12:0e:c0:8c:1b:
e9:da:b8:67:5b:4c:ea:52:24:1c:d6:19:79:1c:35:
14:38:4c:e2:47:a4:7e:90:5a:bc:19:78:61:ba:ba:
6f:56:fe:d1:cf:9d:25:66:2e:45:28:a1:3e:15:39:
58:9b:52:ac:ab:bf:8d:d7:7d:a7:75:08:72:c7:f2:
4b:61:bb:a6:59:aa:69:c7:3b:80:2c:51:18:c1:4c:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:A5:5F:91:E1:65:42:FB:11:84:42:E8:16:EE:DA:07:95:07:72
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:59:f8:86:39:b5:17:6e:99:61:af:10:03:93:cf:48:c7:
5c:bb:f8:59:74:bf:5d:9c:81:9e:32:5c:19:ca:1d:b3:15:5a:
73:50:0d:92:31:05:0c:fb:3c:a2:02:53:93:df:6c:cc:a6:78:
9c:c0:97:43:f3:a9:36:ea:81:1a:77:51:27:5d:7b:8b:5c:f7:
64:25:c2:b3:5f:61:ef:e8:b9:bf:e0:5a:5a:36:86:be:ef:11:
22:f7:a3:6e:a3:d1:69:b4:8f:99:aa:d8:0e:b8:69:8b:e8:50:
39:53:d0:9f:56:c6:a1:08:b1:e1:2e:58:6d:08:97:1f:58:46:
0e:07:c7:9c:98:37:52:73:17:e7:fb:7e:54:f4:ac:46:5b:7f:
d4:e6:3a:72:b8:1e:09:d0:07:31:dc:67:09:7b:8d:99:b4:0f:
cd:6f:45:64:6e:52:d2:ed:f6:be:d7:99:74:cc:d2:7d:cd:da:
da:2b:32:81:d7:82:19:a5:8d:3b:69:31:35:46:29:2a:b9:37:
2b:1e:9c:ab:e8:47:bf:dd:dd:69:9b:b5:3e:63:be:09:73:7b:
e1:fd:32:0c:48:dd:85:55:73:77:53:87:23:e3:24:7b:cc:bb:
6e:10:9f:f1:ed:4f:47:95:3a:36:99:5b:df:6f:1f:66:40:69:
0f:55:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:40:11 2025 by rpki-client