Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: TlTEd7IaU2thWVbmuPjr9a8owT6kqj2vMq9/Zu/Be6Y=
Subject key identifier: A4:FA:68:73:81:AF:50:BB:57:DA:73:AE:9F:F6:13:FD:73:C2:1E:A6
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 0197B70F21BC23ED8EBE8E69358EE54D575A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 1090
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: 6GM5Vj+Rn+V9QY8GyKgNRECd93U6WF9ql9a50+a4UtA=)
2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:21:bc:23:ed:8e:be:8e:69:35:8e:e5:4d:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=a4fa687381af50bb57da73ae9ff613fd73c21ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:06:34:1b:15:68:60:85:77:06:24:4b:60:
06:01:55:43:6f:dc:26:3c:d1:90:38:b0:a9:1e:a6:
c5:ab:96:d4:9d:45:ea:17:d8:9a:de:35:c5:9b:18:
05:61:2d:fd:ca:23:5f:45:e5:88:04:62:49:34:1a:
0d:33:0d:a6:7e:d8:8f:52:cb:4d:c9:3e:5d:5a:64:
58:20:2d:51:97:52:6b:59:2c:9d:b3:7a:97:f4:82:
52:00:5c:c2:56:91:dc:3d:e9:8a:cf:3f:8b:0d:2d:
c9:2e:65:a3:10:9f:4e:3b:68:76:f0:47:15:2e:f5:
ec:0e:30:79:71:bd:c6:8f:34:29:33:b0:50:e0:da:
12:91:9c:66:de:9b:ae:02:5c:c3:39:51:7d:69:48:
60:2f:6c:1f:99:55:ee:cc:9b:c2:8d:b4:e3:c2:75:
65:67:0a:5b:81:c0:df:85:84:e6:27:5c:76:52:ae:
ff:cb:b8:06:42:b4:a0:ba:93:56:03:d7:f9:16:77:
ef:74:6c:a2:6b:89:2b:ce:b2:85:ca:6e:75:96:a0:
63:08:aa:c2:d3:21:f0:95:f4:fb:b5:04:40:3c:61:
3e:c7:38:f3:f9:ae:9b:6f:a4:2a:4f:a1:43:fc:61:
5b:89:51:9b:eb:eb:70:32:a3:9c:72:fb:da:a1:b8:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:68:73:81:AF:50:BB:57:DA:73:AE:9F:F6:13:FD:73:C2:1E:A6
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:6d:e8:a0:f2:e0:39:d2:3f:11:ac:37:a9:42:ff:be:77:
b7:88:da:70:07:1a:50:f6:18:e2:4a:cb:0e:de:87:4c:5b:a1:
b9:f3:db:41:41:fa:7b:0a:da:e1:db:3c:7d:ad:bb:77:69:67:
d7:63:b4:d1:3c:4b:b3:7d:df:49:34:06:6d:08:bf:e8:33:01:
0b:fb:eb:64:c9:6c:e3:11:37:77:77:28:79:04:ee:e4:ee:e5:
0a:57:df:5b:39:e8:67:99:a6:44:42:e5:75:6f:9e:66:72:1f:
36:bf:28:c0:44:ec:90:57:53:59:56:e3:4b:a8:0d:e3:71:1f:
7f:7d:33:24:5c:2f:5f:23:51:25:1a:64:9c:54:21:3f:d6:06:
32:28:79:f7:35:3f:95:d3:f9:a5:74:86:9c:5e:50:b5:ea:9d:
30:0b:b0:7b:5d:e7:de:e3:c2:c0:19:75:e4:05:ad:5e:97:1f:
00:84:6c:62:bb:20:17:fc:5d:6f:ab:f5:9a:bf:dd:74:ce:39:
db:5b:2a:98:f7:dc:bb:42:3a:b9:86:d5:d1:16:e6:c1:03:26:
13:46:79:f2:35:c4:57:ba:7b:a7:4b:42:70:04:4a:3b:1c:4f:
2a:bd:b1:e3:dc:d4:a5:8a:0b:f8:35:26:aa:96:fc:1a:ba:23:
e9:20:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:58 2025 by rpki-client