Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: fX27Y82TScDVohlD9yLn5bGvTfHfgycOrLpX3CL0q1A=
Subject key identifier: C1:EF:9A:37:D9:9C:57:C2:8D:3A:9C:4C:E6:A8:C1:C4:AA:1C:72:C3
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 0197B7457E2D5933DB838FCB3A5F7454DF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 02A9
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: zNlBbCUsXbleObxhi8lSQuoX7LrDXfh3JSHOP9R48vI=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7e:2d:59:33:db:83:8f:cb:3a:5f:74:54:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=c1ef9a37d99c57c28d3a9c4ce6a8c1c4aa1c72c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:d5:9a:64:70:f7:0f:1c:4c:84:4e:ac:e0:
76:1d:a7:e5:c9:ad:87:74:09:a3:d2:5a:0f:a7:b3:
46:56:98:36:ea:b4:8d:43:11:c7:79:ce:f1:fd:e7:
27:be:3c:f0:9f:d3:6a:37:f7:bc:d8:1a:d1:c2:2a:
87:44:a0:a3:39:cd:a2:95:c8:02:4f:e0:19:18:07:
98:ea:26:d9:bb:9e:ee:8b:cb:e2:c0:c6:95:0b:77:
31:a3:5a:fc:32:b0:d5:b4:2f:e4:75:6c:d0:06:1b:
b4:fb:a8:8c:4d:be:5d:5b:c1:59:22:4a:e7:16:8e:
fd:92:f9:64:cf:5b:35:ea:d3:bc:16:37:36:ba:36:
85:bb:81:85:c8:4f:5b:48:a8:4b:7a:31:6a:b1:ac:
48:b0:85:a8:a8:14:7e:6b:f8:c9:cd:90:83:fc:39:
63:f2:26:91:d3:d8:88:24:25:ca:75:b0:53:5c:53:
fc:e9:f1:bd:e3:18:bf:cd:d0:c0:06:34:a8:60:06:
0c:7d:e9:63:19:bc:72:7e:eb:22:83:51:15:77:df:
e9:7a:66:c6:6a:9d:22:70:20:12:d9:ad:89:cb:97:
70:8f:7c:8f:e6:03:3b:ad:18:9e:0f:26:52:a1:82:
0e:57:50:ee:29:34:05:84:4c:22:61:37:54:ea:d5:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:9A:37:D9:9C:57:C2:8D:3A:9C:4C:E6:A8:C1:C4:AA:1C:72:C3
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:3e:cd:a5:de:24:1f:ec:96:33:17:02:ac:e3:e3:37:1f:
da:fa:32:39:c1:ae:27:03:e0:fa:8f:0f:90:aa:b3:57:82:6d:
9b:23:3a:41:89:d0:61:10:f2:77:77:cf:90:60:5d:9d:f1:55:
8c:8b:27:8f:3e:1f:07:43:e3:2e:bc:db:36:1a:aa:7d:e9:52:
ba:2b:99:81:7d:37:34:01:b2:f2:20:87:b0:5e:ee:eb:73:ee:
ca:ba:a2:4c:3b:36:6b:a7:2b:8f:53:9c:3d:3d:fa:12:03:a3:
26:d4:4f:77:36:2c:6a:6e:94:65:c7:73:ac:a5:1e:f7:a2:8c:
6a:4d:cc:b5:ef:ac:04:94:bb:94:58:63:34:98:f1:33:b3:77:
5e:7d:8a:dc:1c:85:fb:6f:88:b1:38:ef:c0:e7:34:27:3b:0c:
d0:88:cd:2c:44:35:8f:47:42:17:f4:c7:fe:ed:37:f9:1a:4f:
fa:dd:b6:28:36:2f:a9:ab:72:c4:4f:6f:be:9c:b1:60:cc:0c:
e8:12:05:29:ad:cd:0c:ca:da:70:05:e2:d9:23:ce:46:8f:29:
50:07:64:0b:c8:12:a0:a3:a9:ab:2c:e5:6f:14:9a:c4:98:02:
8c:eb:52:e0:48:b4:5e:f2:33:bf:fa:95:9a:b3:b6:50:d7:90:
48:5a:7d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:12 2025 by rpki-client