Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: za8NySBV7iG+6AQVsS5K80zaU8XtJ1f4jeT9J17P0aA=
Subject key identifier: AB:71:0F:DA:56:44:16:27:9E:8D:41:D8:B2:A8:8A:7F:86:57:86:B3
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0197B9A1C3E9963F0CB6C2EA8357A4C9CAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 03:01:15 +0000
Manifest this update: Sun 29 Jun 2025 03:01:15 +0000
Manifest next update: Mon 30 Jun 2025 03:01:15 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: NHgB6g5V+/OIoYhyHjNHS7d8PaivPP1hxKClVzSOTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c3:e9:96:3f:0c:b6:c2:ea:83:57:a4:c9:ca:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Jun 29 03:01:15 2025 GMT
Not After : Jun 30 03:01:15 2025 GMT
Subject: CN=ab710fda564416279e8d41d8b2a88a7f865786b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:c1:61:f0:93:37:ba:3c:7e:81:69:ea:10:
b8:08:4a:5a:89:61:c9:f3:d4:19:04:95:ef:ae:92:
2d:1f:65:ae:dc:ed:a2:ec:9d:24:46:36:51:14:e8:
3b:42:a4:b5:03:fb:fb:86:d1:49:15:e7:c7:b7:82:
0e:9e:e9:d2:90:b2:b1:58:65:b7:f8:5b:9a:c2:ba:
84:3f:56:a8:6f:09:76:34:cb:9c:48:c0:df:27:3b:
ae:1c:2e:62:0c:3e:82:fd:68:d8:0b:49:b2:27:c3:
4c:99:e6:72:67:66:b3:39:be:ad:69:1a:75:0d:94:
21:91:c7:c9:1a:89:89:c9:51:28:e8:b3:4f:ce:95:
27:7f:22:0d:61:75:38:3c:e4:1e:67:6c:c3:ef:91:
a3:e5:69:31:21:69:eb:60:a9:3c:07:0e:0e:1b:20:
53:7b:0a:02:59:5a:27:2a:d0:7e:6a:4c:c0:07:7e:
6a:f7:98:b8:4d:7b:54:f6:12:aa:40:79:e6:9d:d6:
1e:65:a6:c5:fb:15:d0:33:2d:91:9f:db:1e:72:6b:
99:18:46:52:de:c7:a8:7a:e6:15:bc:97:4a:9b:48:
58:ad:f6:04:9e:7b:e2:aa:43:32:dc:c2:ef:9d:58:
b6:5b:13:73:3b:e4:22:e7:c1:83:da:29:2d:33:0c:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:0F:DA:56:44:16:27:9E:8D:41:D8:B2:A8:8A:7F:86:57:86:B3
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:01:a2:3c:09:65:44:eb:12:5b:b5:22:6b:6e:4b:17:02:
09:ce:e1:d7:ba:67:98:b6:62:c9:cb:97:3d:2c:d2:db:e2:0e:
33:06:b4:1a:51:8f:5b:4b:57:22:1d:94:dd:5f:c3:80:1d:26:
f8:76:29:0e:88:be:ec:47:7a:aa:30:85:0b:b4:1d:ce:a9:9f:
76:27:65:3a:c8:72:20:6e:0b:18:1b:0d:b6:93:9e:e5:6c:71:
96:26:b7:c7:ec:37:02:c6:87:3d:a3:61:79:10:08:67:a5:85:
0a:de:27:e1:a0:49:18:b0:b9:9d:0e:35:9b:eb:48:0c:07:8e:
89:f0:dd:77:13:ff:1a:a9:f0:01:9e:fe:28:00:9e:8a:e8:b8:
90:e1:01:1d:4f:7b:b5:3b:6f:70:74:32:3b:58:c4:1e:c2:d7:
0e:70:70:d3:74:6c:f2:78:ff:57:40:52:ac:33:f8:c6:77:12:
db:c5:32:b2:96:33:3e:48:b8:1c:6f:18:87:1c:a2:6d:45:da:
ee:61:f4:e2:61:0d:aa:0c:73:a4:ef:17:7d:b1:0e:ac:92:d1:
7a:11:c9:aa:f7:77:86:c8:7b:0b:41:26:0c:70:a0:49:12:48:
5d:45:80:c1:7d:f2:76:e4:ee:c6:21:bf:c5:f3:2b:b6:84:46:
f5:24:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:46 2025 by rpki-client