Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: ioNKwwEIbfXBkt33++HqmO06LMJl0tjQnImfkJwau/k=
Subject key identifier: 5D:2F:C6:8A:D9:29:2D:54:03:E2:C6:FD:9A:B8:56:D8:91:93:D2:99
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 0197B6D7C2C27971D01EA1FE63282C1CC92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: Zvz7REUI4QmOBbWC9mnwpa+jlOqhW1Uom1HSameegm4=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c2:c2:79:71:d0:1e:a1:fe:63:28:2c:1c:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=5d2fc68ad9292d5403e2c6fd9ab856d89193d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:ee:66:60:c5:e7:65:1a:9b:42:46:08:a5:
fe:c6:7a:34:19:39:81:d4:75:dd:cb:e3:2e:67:70:
12:23:50:1b:5d:a3:67:f0:7c:67:49:4a:a5:93:3b:
b4:d6:f4:06:b8:08:a2:3b:8d:62:9a:e2:b9:86:f3:
41:a4:72:f1:9e:5b:0b:88:ed:9e:62:31:5d:5a:8e:
3c:c5:30:d1:68:20:ae:27:95:23:d7:05:9c:48:55:
8e:03:33:26:51:9f:36:8b:00:4c:a4:de:76:c8:9f:
00:44:d0:12:ea:ea:b2:46:3d:7e:55:f4:0f:aa:c9:
6f:d3:2b:01:d9:d7:48:df:d3:fa:8a:12:ff:df:18:
03:58:ab:48:d4:e6:7d:70:73:7d:8f:1f:87:19:5f:
39:25:d0:b6:4b:45:6f:15:8d:1f:b2:fb:39:e5:5c:
0d:bf:d6:24:c3:3f:e8:2d:89:c7:85:f6:1a:13:1b:
fb:51:11:ba:23:48:3f:a3:87:6f:eb:75:4a:3e:b7:
32:e7:e9:b1:78:2a:36:a7:5a:84:8e:be:d5:bb:7f:
07:9c:79:cb:4d:71:9d:7c:9c:47:f8:32:16:c5:dd:
25:77:b6:41:f8:8e:44:89:3b:01:42:98:15:f6:ba:
1a:65:2c:cd:32:25:f1:e2:d7:b1:89:97:8a:84:01:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:C6:8A:D9:29:2D:54:03:E2:C6:FD:9A:B8:56:D8:91:93:D2:99
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:4e:c5:0a:aa:6c:91:b7:ff:78:bd:17:32:d0:0f:99:f2:
76:50:72:cb:88:c8:0c:b1:83:1b:8b:37:bd:35:0f:54:27:7c:
7c:36:63:0d:7a:a6:ca:67:40:5b:0f:75:74:b7:d5:3e:42:80:
e5:7a:d0:f7:17:64:37:7f:d7:00:a3:d9:01:38:e4:03:a3:d4:
9f:ed:95:ec:78:54:0d:c6:f1:56:c8:fd:61:df:79:bc:af:c0:
2a:8b:d1:13:81:11:78:79:62:7b:78:c4:b8:dd:62:8d:9e:5c:
f9:0d:0d:f4:28:67:dd:23:47:ac:c7:ba:00:1c:b1:c9:fa:e5:
e6:7a:32:c4:c9:0a:35:23:b1:5a:23:2f:b8:c1:79:ca:f2:a4:
74:c6:b3:85:d8:e8:c1:a6:5f:3e:bc:b3:ce:28:10:dd:50:2a:
4a:ea:90:5a:76:e6:c4:70:39:7d:20:f2:dc:64:64:a0:2b:a3:
20:e2:fb:2c:4d:40:dd:68:42:51:02:17:cc:09:99:47:d4:dd:
bd:be:4e:2e:53:ee:b4:a9:6a:73:c8:00:03:31:18:bc:6a:4c:
cd:12:c8:82:9e:4d:14:7d:af:75:4e:9a:ba:29:c6:ab:a2:75:
85:f7:74:a7:76:1e:cf:1b:ce:e4:ad:26:cb:b4:b3:ba:fc:1b:
d8:6d:bd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:43 2025 by rpki-client