Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: dThYtrTFflSFWJ3mzG0EJ/DlwrFkoDnvFUEk85uKcTk=
Subject key identifier: 8A:64:52:E8:FB:BA:C2:4C:7A:83:F7:11:01:23:B2:1A:F9:07:CB:F1
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 0197B632A40D5F232548A6D1B53F378CE656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 09BB
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: MIX2hf1w65BwI5MvstCPmdXegUNNoINssLD/479NoGk=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a4:0d:5f:23:25:48:a6:d1:b5:3f:37:8c:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=8a6452e8fbbac24c7a83f7110123b21af907cbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:bb:21:18:79:b6:19:8a:04:98:56:c1:38:
94:9d:15:ad:95:36:17:a0:f2:5c:5f:6c:5b:25:cd:
d1:62:40:ee:35:56:69:ff:85:e2:8f:b8:9b:51:bb:
27:fa:f6:84:06:fa:e4:c2:5e:d1:75:b2:37:88:59:
ce:dd:cd:28:d7:fe:98:2e:d3:f6:1c:5a:4f:c1:e2:
1d:b7:5f:71:0b:bd:55:f6:3e:89:7f:5a:0f:d8:6e:
8d:5f:69:19:a6:b6:90:1f:23:1c:c8:4e:8b:06:96:
5d:ff:2e:58:89:85:64:69:7b:a7:ba:a8:c0:c3:61:
67:98:66:8d:37:ed:03:bc:27:e2:ce:92:01:26:6b:
95:7b:6c:97:6d:fd:7a:d7:2f:39:d8:ef:f9:fc:2f:
c5:c8:1a:96:cb:d7:26:9b:15:b1:c5:9c:62:f3:cf:
f0:9f:a7:e9:6f:fa:b0:48:66:7c:c8:99:15:75:b8:
7a:33:38:ba:19:a2:70:01:61:7b:0a:fb:1e:09:7a:
06:72:3e:1f:b1:62:c1:c0:90:72:ca:84:eb:f5:4b:
d7:20:14:6a:0b:c6:29:77:23:c8:30:71:3d:b9:90:
f0:66:ae:39:75:c7:21:c3:74:70:9d:bb:0e:aa:0c:
35:00:1c:e9:d4:28:2c:a9:cc:66:2d:af:f2:a7:06:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:52:E8:FB:BA:C2:4C:7A:83:F7:11:01:23:B2:1A:F9:07:CB:F1
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:81:4c:e7:4e:30:b5:12:b6:a1:42:cf:80:fa:58:f3:30:40:
57:83:44:41:0c:05:6d:b7:89:e9:19:94:0e:ea:50:e3:fd:ec:
47:fe:3d:46:a5:85:00:2b:45:c6:36:2c:a4:67:c6:aa:e8:07:
a7:7f:04:4d:5b:4c:82:a7:6e:8f:9a:4e:97:eb:aa:00:f3:17:
a0:89:7c:f6:21:ca:1c:bb:87:e0:86:aa:29:fa:e0:47:6d:6e:
92:8e:c5:cd:a8:d2:34:0c:1c:cf:2d:8a:fa:33:e9:9c:42:ca:
1b:b5:8c:a2:1a:2f:af:46:7d:99:3d:d6:77:65:7f:a9:c8:07:
86:b1:89:42:d6:12:b4:bf:63:44:ce:68:eb:fa:19:44:35:ac:
22:e5:51:8e:24:05:76:e4:df:47:b3:c8:99:b8:03:20:14:da:
f2:ba:30:82:e0:db:1c:34:50:f5:82:11:09:bc:f3:b1:91:18:
22:e4:27:8b:e6:5e:f5:f1:f6:42:20:28:da:3c:dc:80:97:77:
d2:f0:33:a5:43:e6:34:1d:71:05:11:48:5d:fc:ed:1c:c9:a7:
75:16:97:db:3b:8a:ca:34:9b:c0:91:7a:cd:61:86:b6:bb:cc:
df:9c:0d:4f:0a:0d:27:36:a9:93:6f:07:c8:4e:0e:61:5a:6c:
8d:4a:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:52 2025 by rpki-client