Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: WjBEafIuq66W51JPDzo4GZh8QHLRh3qZJqD/4n4i5Rc=
Subject key identifier: F3:02:46:E4:D4:61:F0:0F:91:DF:61:C1:6A:B8:B0:58:EE:E9:3A:0A
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0197B77CD35A513648D4334474F13320D3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: 6UIwIPmxKBg0U+P9Ed8W1FWEuPRuMdSo8fRK2+69rJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d3:5a:51:36:48:d4:33:44:74:f1:33:20:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=f30246e4d461f00f91df61c16ab8b058eee93a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:69:fe:8f:37:68:ff:b9:f3:a0:39:e4:43:
99:c3:52:31:77:76:ed:81:a4:4c:be:aa:91:b2:31:
6a:c2:3f:21:aa:bc:9d:7c:53:cc:f2:68:4b:b1:b0:
c9:d5:85:04:bc:f9:83:15:11:b2:03:50:28:fd:b5:
37:ca:6f:3d:f6:55:05:a8:65:9f:f4:5f:db:cf:15:
5c:a7:98:00:94:4c:40:4b:ac:0e:c3:37:75:9a:f1:
ce:88:10:a2:49:bf:0f:39:47:38:bb:91:a4:69:e8:
a8:ee:fb:17:82:2a:aa:6f:ae:cf:bb:43:a7:38:16:
87:22:ca:f7:d7:00:14:65:16:f2:e8:e4:9f:4f:03:
03:f5:01:0a:c9:87:3d:54:cc:8b:cd:5f:84:3f:a1:
5a:c2:f3:5d:53:36:3d:6d:57:57:0f:f5:cb:a4:e4:
97:22:d5:a7:e4:0c:d2:c0:5d:44:52:7c:5f:58:87:
9f:bf:21:11:5d:ad:3b:68:53:1a:56:73:f6:f5:46:
45:45:48:ef:26:64:36:5b:e9:06:f2:70:cb:af:b8:
d7:91:ec:d5:76:1c:ad:ca:98:95:31:91:76:a4:86:
df:49:02:ea:f8:0e:35:5a:e4:24:bb:41:c3:35:40:
51:26:e8:83:c6:93:b9:72:69:a0:aa:17:8e:e6:91:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:46:E4:D4:61:F0:0F:91:DF:61:C1:6A:B8:B0:58:EE:E9:3A:0A
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:9d:20:9b:e3:99:6f:f4:26:a8:d8:91:4e:c1:b4:e6:8e:
91:c2:b2:1d:6e:77:7e:a5:6e:32:b2:1e:a0:c9:53:e2:7f:14:
10:3e:51:cd:f9:25:18:2b:c5:05:95:40:33:76:c2:92:25:20:
15:13:97:a8:f7:af:cc:a2:79:e5:28:30:65:a8:86:82:94:ca:
af:4c:9f:38:cd:8b:9f:33:51:98:19:44:00:e3:c5:93:8e:8c:
c2:b6:d9:70:5e:3a:4e:8b:89:89:0d:08:d7:07:8f:ef:e6:02:
ee:73:16:52:55:0d:e0:62:f4:0a:81:60:f1:df:d8:0c:b5:45:
c4:31:4f:cd:55:9b:13:80:f3:16:d9:4a:23:c1:63:b7:b3:2e:
ee:50:a8:4b:96:fc:4b:85:92:56:98:ab:aa:4f:9d:96:12:2f:
a1:32:b2:57:81:3a:1a:4d:2a:b1:e4:75:50:3f:89:dc:13:51:
6b:5c:51:0c:41:5d:93:f7:43:7e:d2:8c:9d:c9:51:39:fa:97:
41:46:4b:f0:cb:a6:6e:f7:41:67:6d:1e:16:c4:11:f2:35:55:
f5:4b:3e:a0:38:a2:1d:a3:79:ee:37:a7:99:c4:61:64:a8:90:
12:d6:0e:07:89:8e:a4:02:a4:bc:85:6a:bc:80:c7:10:f1:3a:
16:30:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:16 2025 by rpki-client