Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: b+uPb4l/TYfGgj1IaPz+Ly5OyTl+WQO+WKvAnL6KysA=
Subject key identifier: E5:BD:1A:4E:A2:33:0A:26:8B:BA:69:FC:27:B6:EB:02:44:6D:55:7B
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 0197B7B38151EE497F13F691255FA7F13604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 0103
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: 82NBi5+OZcfAESLTAlC210MS2o8lIEIl+xy1IkJTm1I=)
2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:81:51:ee:49:7f:13:f6:91:25:5f:a7:f1:36:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=e5bd1a4ea2330a268bba69fc27b6eb02446d557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:84:9c:cd:df:19:c8:7f:29:58:47:8d:7a:
a1:00:ac:cf:43:ce:d4:c8:e6:5b:d5:3c:72:f3:5d:
fc:d0:1d:ca:44:12:65:3f:38:cf:d6:fa:ec:a9:39:
16:98:3c:72:4d:df:fd:5d:6f:6a:1b:0a:bc:10:b3:
6b:b4:1a:40:48:f1:8e:c5:2f:09:f0:c4:63:ea:d5:
bf:bf:13:ea:b7:80:a6:ba:ec:b8:0a:38:34:a2:62:
dd:98:06:c8:bd:bc:58:54:f1:e7:c1:25:ac:11:42:
83:84:b3:3d:ee:14:3f:7d:31:c2:4b:f7:de:cf:f8:
6c:ce:a9:c3:68:db:59:21:1b:c8:4c:58:5a:c4:c8:
2e:12:9a:29:e5:03:28:01:82:e1:e8:e7:6b:a6:be:
70:a0:83:1d:54:7e:f7:f3:77:0f:2c:42:64:73:cb:
e4:9a:df:ef:07:65:9f:ed:4d:ea:3c:06:5e:81:1a:
90:a3:ab:a7:8f:31:80:a5:72:d4:8b:7a:0f:6e:08:
d0:2a:29:b9:a5:44:60:af:7c:72:81:05:44:52:5c:
db:fa:6b:46:cc:1e:06:6b:70:0d:6b:a7:ec:26:59:
4a:8d:92:37:74:f8:1a:09:0e:5a:96:67:0a:6f:7a:
9c:f4:9f:8f:7d:a7:d3:ee:e3:f6:01:3c:1d:5b:85:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:1A:4E:A2:33:0A:26:8B:BA:69:FC:27:B6:EB:02:44:6D:55:7B
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:f5:00:e3:87:f8:51:ed:d5:d0:9a:1b:ba:66:60:7d:85:
b2:db:aa:cb:d8:e0:12:d6:eb:ad:56:5c:ee:23:ed:d1:b3:06:
1e:28:c9:99:cc:eb:a2:23:d6:ad:49:8f:7c:70:c5:37:18:47:
f8:e0:98:3f:59:47:d0:18:98:b0:7e:6b:96:99:f1:ad:16:94:
be:aa:b9:d8:a6:23:0b:ae:e7:a7:51:45:5b:df:96:12:45:e6:
78:13:ed:ed:84:a6:fa:21:af:62:73:4e:7b:5f:78:4f:f3:c5:
0c:f1:08:b9:a8:38:bf:ab:b6:24:31:46:39:8d:21:e8:5a:a6:
5c:eb:f9:58:51:c5:34:62:08:d9:62:d5:17:6e:7c:ba:d7:29:
e2:68:3b:ef:25:6c:0f:f8:5a:23:df:0f:0b:e7:cc:5f:6a:45:
2c:04:11:d9:d8:f3:b3:1d:09:19:80:71:d6:54:fb:2c:9c:93:
35:c8:3d:59:c0:5c:67:da:cc:1d:44:e3:71:2f:60:4b:6b:83:
ff:06:97:4f:cd:2f:22:50:13:15:2c:06:ab:d1:f6:c6:fd:7a:
40:74:fa:61:19:fb:a3:da:eb:f8:9d:75:13:a9:2b:56:07:0b:
ad:80:da:ff:3d:7c:2e:2d:46:bd:50:af:79:ef:a4:89:32:3f:
5b:4f:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:02 2025 by rpki-client