Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: 1Vxw55CDXYLrpWbFyuqj6uC7avm5V0SjsCnJrnoMGsI=
Subject key identifier: DB:B2:3C:53:00:B0:29:6B:9E:52:B3:7D:1B:FE:A5:EA:7D:62:34:20
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 0197B88FF458A1349B72A6FE5B0D924F9332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 047C
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: +1bgEYTBjET6gATok0qShry21vnxOVY5LwANPDFIs1c=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f4:58:a1:34:9b:72:a6:fe:5b:0d:92:4f:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=dbb23c5300b0296b9e52b37d1bfea5ea7d623420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:aa:4b:ab:59:aa:ed:0e:7d:c4:69:eb:2a:
c1:68:64:88:55:43:88:9f:05:79:f8:87:d2:d0:d1:
88:74:68:1c:6b:97:75:92:69:a5:e5:cd:14:10:29:
5b:79:5b:77:a6:64:a7:38:af:4f:c7:15:76:96:d4:
16:03:3b:a9:b0:23:2a:ab:c1:0f:a9:b9:f7:b6:6b:
f4:c3:55:fa:bb:ee:6b:df:16:c1:a1:43:8d:ac:1b:
ad:1c:a3:06:d7:12:db:cd:ed:84:a0:f8:a9:33:d7:
11:db:0f:41:03:71:21:e9:ec:6f:c8:10:21:49:a9:
a4:ec:28:b3:6f:42:15:ba:7e:b3:0d:fd:56:fc:57:
2c:ca:ae:09:7e:da:b0:9b:ff:86:97:54:76:03:08:
cc:96:9c:5f:3c:1d:2e:e6:77:78:f9:18:d5:51:77:
75:a3:6e:f6:aa:19:80:43:9e:18:df:82:26:8f:78:
d2:fa:31:e0:4b:d2:9b:bc:09:57:07:79:e6:7b:4a:
5e:ca:5b:b9:51:09:09:c6:fe:3e:c4:7d:69:a6:4e:
4b:31:a5:1d:3c:ea:0f:ee:f8:52:4b:fc:00:8c:75:
f9:8f:61:b8:54:63:89:23:7b:7a:e8:4a:f0:2c:4a:
96:87:89:9a:3a:17:58:69:3e:71:98:81:28:03:ad:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:3C:53:00:B0:29:6B:9E:52:B3:7D:1B:FE:A5:EA:7D:62:34:20
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:77:5c:1f:38:67:c7:35:13:9e:6f:6d:6a:41:c8:50:d2:
72:5a:9e:97:44:fa:b7:d3:83:88:75:e6:b6:1b:3b:72:71:9b:
42:3a:b7:ee:32:ea:de:86:d3:dd:9c:d1:ac:c4:f3:df:51:26:
bf:0f:c6:a7:a1:dd:be:f6:dd:85:5d:66:7d:b8:ae:b4:c2:f9:
d7:69:6e:d0:8b:21:94:92:52:d2:e3:19:1f:5e:82:cb:bd:e5:
dd:67:69:ca:2d:cc:c5:f2:b4:d3:30:1c:43:fc:db:a7:9c:35:
47:72:fc:57:fa:e6:f0:08:8f:4f:30:3b:19:f9:98:66:fb:80:
71:5a:a1:83:55:e7:f0:e6:61:11:53:b9:c9:bf:6b:32:b5:66:
7f:db:5c:ba:a2:56:f9:e1:65:01:d9:1c:b8:ee:bf:13:d1:7c:
ae:ed:0b:4d:ac:09:d0:e3:32:19:43:00:f5:c2:66:65:11:1d:
a3:72:86:b0:07:c8:c8:da:1f:79:2a:04:95:ed:1a:df:1a:4c:
0d:6c:1c:15:f7:3a:2e:98:50:d7:28:e1:fa:3c:58:4e:18:cc:
ce:c2:74:6c:0c:a9:0f:f5:2e:53:05:05:7b:69:b3:2c:8d:37:
59:e5:e3:62:9c:79:44:43:69:20:0d:fe:89:c4:91:06:88:c0:
67:86:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:59 2025 by rpki-client