Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: pPJOk9ywB0QFbuFHEwaUrhI/LfDx1hxXQ5yFog5Zodk=
Subject key identifier: 51:C3:24:0C:48:39:B5:04:F0:3F:EB:0A:32:BF:6A:15:4A:74:9C:F3
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 0197BA7D5166DAA4AF9BB649F9C303F1B9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:01:04 +0000
Manifest this update: Sun 29 Jun 2025 07:01:04 +0000
Manifest next update: Mon 30 Jun 2025 07:01:04 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: dQOl8qN67NZVYsVQDsr0f48J/lfoGp+3RbJEeV2HZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:51:66:da:a4:af:9b:b6:49:f9:c3:03:f1:b9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jun 29 07:01:04 2025 GMT
Not After : Jun 30 07:01:04 2025 GMT
Subject: CN=51c3240c4839b504f03feb0a32bf6a154a749cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:cf:4f:1a:cc:4a:aa:24:64:8b:26:d2:b4:
a0:30:2b:bb:cc:cf:b1:cb:a0:e1:d3:d8:d1:e6:67:
23:49:10:66:ba:00:d8:d8:35:f4:2e:1d:ad:bc:5a:
b6:15:78:be:45:f7:b4:89:13:06:00:46:ca:4e:b8:
85:eb:00:65:b0:ca:c4:25:18:a5:70:46:86:cd:9b:
cf:ac:b0:ae:4b:39:05:26:71:06:10:ef:41:73:d6:
e6:94:0a:fd:88:06:ab:63:cb:b6:82:04:1b:62:8c:
5f:2c:58:27:25:30:32:37:5d:16:86:ec:89:e1:6f:
a9:4f:24:20:78:1e:1a:ee:59:1f:78:71:d6:41:bb:
75:48:6d:f2:ec:e5:63:31:48:37:4d:02:01:ed:6c:
3b:9e:bd:31:a1:06:65:e6:5a:69:06:55:4b:46:d9:
e6:b5:cb:41:38:3b:72:95:89:7e:b5:35:d7:de:78:
66:51:2a:25:a5:9c:23:e3:05:bd:51:2b:dd:8c:ab:
4d:3e:6f:b9:39:00:ee:f1:8e:e9:d8:d9:bc:25:5a:
ce:41:64:80:2d:08:73:4d:a2:5d:a5:5f:89:63:1b:
5f:e0:6e:7c:7a:6c:4f:ff:5b:46:38:0c:31:02:cb:
43:fd:23:cc:a7:01:7b:10:33:62:6a:01:aa:fc:c0:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:24:0C:48:39:B5:04:F0:3F:EB:0A:32:BF:6A:15:4A:74:9C:F3
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:b0:94:bd:4a:7c:2d:73:57:67:1b:48:cc:68:33:67:c1:
ce:2f:c7:53:37:2e:ec:7c:bb:11:c1:a3:bb:3e:4a:df:6b:e3:
33:34:52:68:cc:83:bf:10:33:ad:1b:bd:c5:af:d6:93:05:d6:
65:f9:f8:6b:ee:b1:37:17:7a:16:f9:6c:26:18:ed:9f:9c:1c:
75:c1:c6:b1:3d:e0:10:3b:3d:db:ad:20:db:a9:0d:af:dd:bd:
7a:2b:6b:f4:79:40:c9:ae:e3:4f:06:d7:a8:90:72:7b:a3:f4:
e2:7e:e7:ae:f2:b9:92:28:f5:38:13:34:e5:84:fb:98:ec:4f:
51:2b:1d:9d:68:52:18:38:1b:98:ee:83:5b:f9:55:fc:e7:7f:
c5:99:4a:b6:af:75:63:79:ef:5d:ca:98:9d:2e:50:8d:5a:3c:
ec:4c:0b:fd:6f:2f:c5:de:26:e6:4d:1a:51:66:63:ad:a3:ca:
88:65:44:ac:a7:6e:bf:fc:fa:39:22:b4:95:5a:f3:48:db:da:
91:f4:7d:84:5f:0a:c0:1d:97:82:58:f0:eb:d8:c0:6b:ff:ef:
d8:89:f5:44:27:f5:7e:3f:85:5d:0c:94:57:ea:b7:86:9c:20:
3f:9d:9c:1a:69:0f:d1:41:f3:7c:b9:94:68:5d:a1:aa:6f:d2:
5f:aa:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:24 2025 by rpki-client