Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: StOnpOlx59YHfAcLcqt4S6tGxfmnf/TZBEHfOJXI9FM=
Subject key identifier: BB:5A:0D:A4:23:F1:7B:1D:D4:EA:F5:6C:24:BC:C4:C0:5E:A4:92:F2
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 0197B77C5B1256C9676951001A9E33E2597F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0CEE
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: DmcgOVjkLKjbwkX6dR4OxIN2mjopcUVaibc3YRiq73A=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5b:12:56:c9:67:69:51:00:1a:9e:33:e2:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=bb5a0da423f17b1dd4eaf56c24bcc4c05ea492f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:a5:49:37:7f:78:73:e4:96:75:4d:4f:67:
62:bf:60:94:52:08:d1:7b:5b:a2:70:3c:7c:09:4d:
76:c0:73:cc:1e:cb:17:d4:cb:2d:24:65:7e:ec:94:
8a:aa:22:11:f0:3e:45:0d:17:ba:0f:c7:03:9e:ae:
ba:43:89:e5:8c:42:1c:22:82:b5:90:11:51:56:63:
8d:44:3f:82:0a:58:b4:42:87:55:ea:b0:9a:3a:ef:
a8:b5:ce:ef:91:60:f7:d1:ad:94:4a:7d:e9:36:8a:
7a:fa:f4:07:08:5b:eb:ac:4c:27:96:6e:68:79:5a:
92:1c:d7:96:74:f4:54:90:5e:db:cf:f3:39:0c:4f:
14:c4:6c:ad:5b:cf:eb:b9:2f:d3:1e:a0:ed:45:e2:
e3:25:f0:1a:5a:8f:45:e0:00:ba:c3:84:35:4e:85:
e7:c9:24:14:0c:72:a8:5d:96:f7:77:bc:7f:ce:f7:
c0:03:70:22:53:29:28:93:a5:e3:bf:ac:5e:c8:46:
5d:1e:93:1d:19:05:2d:c4:d5:c9:9b:9e:4a:cc:d2:
aa:b3:b7:cd:a7:a5:10:38:05:12:65:14:bb:4c:d6:
0b:69:6b:30:59:ba:68:b1:15:97:fd:05:4f:4e:fb:
a1:53:d1:9d:dc:37:ed:68:89:7d:c6:97:56:3c:f2:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:0D:A4:23:F1:7B:1D:D4:EA:F5:6C:24:BC:C4:C0:5E:A4:92:F2
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ab:b1:40:42:65:e7:0a:2e:15:0e:09:d6:da:e5:a0:e7:80:
ea:42:4d:7e:85:39:56:f3:77:ed:d1:be:a1:bc:1a:03:01:f3:
b2:02:23:94:81:fc:11:a8:f6:07:05:de:55:86:96:aa:d4:7d:
b2:2e:58:7b:89:3d:17:60:15:c6:43:58:7f:67:2a:42:88:0f:
95:e6:c2:42:2c:ab:3f:a9:15:d1:8c:86:5e:87:b1:f6:80:23:
3b:c0:b4:62:a2:96:aa:c5:5e:ca:d1:77:50:9e:c3:91:5a:6d:
0c:3f:ba:5b:b7:a3:ef:87:24:9c:56:bc:34:ff:53:6a:4b:86:
2b:28:d2:da:0c:7d:ff:58:88:59:6c:01:6d:3e:67:9f:0a:f0:
01:01:86:9d:53:f7:c3:5d:72:d6:25:59:af:f8:52:0b:3e:fb:
5e:a5:4f:66:30:42:34:b8:54:38:b3:64:d7:e6:8d:0e:e5:60:
df:66:b0:26:b3:54:24:ac:35:47:46:4b:1d:52:2b:b2:23:0f:
10:60:7b:53:21:37:26:de:b1:b8:be:2a:77:3e:2d:f8:ad:08:
06:0c:a0:05:82:b4:08:00:0c:d3:94:f5:e0:d4:a2:e0:95:eb:
9f:ac:92:6d:3d:0b:57:58:a3:34:57:4b:33:79:04:bc:ee:57:
52:b6:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:39 2025 by rpki-client