Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: 9H79yy+pPlnPpMpBF3dt4w/vfsaCm24m4RqgLvdE7Lg=
Subject key identifier: 69:C9:68:8B:95:37:31:07:FF:2B:1E:91:EF:BE:35:AD:6F:61:F3:66
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 0197B6A20B02F4AC1A71224BBDF0BE49601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0A5B
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: htD3UZjv6NTdASFbpP69qpb2d/TGC12HOint8FAI/AY=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0b:02:f4:ac:1a:71:22:4b:bd:f0:be:49:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=69c9688b95373107ff2b1e91efbe35ad6f61f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:c8:f5:bd:a8:a1:da:95:ed:33:73:1b:a5:
e9:ae:3c:7d:2a:1f:5c:38:c3:e0:cc:68:1a:36:99:
7a:e5:db:f1:3a:65:37:18:61:35:a5:07:e1:e9:9e:
da:91:d1:4d:4c:d7:47:a1:ef:30:7b:37:7e:1b:94:
5a:48:c5:9a:d5:92:04:fb:02:aa:76:bc:25:dd:a1:
8d:89:d4:1e:1c:6d:29:66:7f:20:e2:d0:ad:01:91:
9b:92:5a:5a:50:57:97:43:5f:03:cb:ed:d6:92:61:
07:b9:a1:1f:e8:ec:2e:d5:5b:2c:a7:a9:3c:16:7a:
98:52:b2:35:0d:0e:02:3b:5f:e7:b7:96:60:29:49:
b9:84:44:3e:da:ca:2d:e6:ad:07:da:be:3e:c6:c2:
30:b0:d2:ab:6d:4c:8a:48:aa:1c:1e:eb:e5:16:f5:
3b:8e:0e:63:9a:71:26:f1:21:67:f7:41:47:a0:88:
f1:62:b3:1c:1b:b0:19:4a:e8:a0:99:5e:e9:0c:a7:
10:c8:67:58:f3:fb:50:6c:f6:e0:1f:ea:30:ba:da:
a9:3d:f8:b5:5a:e7:e8:f1:b9:31:3a:52:3c:29:b9:
7d:cd:52:4d:72:74:84:5f:43:11:7b:67:d2:64:e1:
ac:da:db:b4:f1:af:d8:f6:39:75:30:dc:46:20:44:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:68:8B:95:37:31:07:FF:2B:1E:91:EF:BE:35:AD:6F:61:F3:66
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1d:3b:3f:a0:6c:23:9b:4c:f5:b7:cd:72:0a:5b:06:7e:30:
4d:7f:aa:af:69:c9:79:cc:9e:f9:6c:c6:aa:03:37:7e:60:a3:
7b:51:2c:63:11:7a:08:bb:02:9d:da:ec:9e:83:a7:44:c5:e7:
7e:44:f6:d6:5c:ec:37:12:ed:38:f5:62:87:05:20:ff:92:e5:
50:45:e6:5e:79:d8:89:c0:a6:e0:7f:5e:11:58:96:c3:bd:ee:
c0:96:94:d9:92:91:70:c7:f0:e1:8a:40:c0:6f:9a:89:3a:6a:
d7:11:d2:9a:67:c7:f6:b7:bd:c2:d1:99:7b:0c:d3:79:09:15:
82:88:e0:ff:e8:64:fd:19:56:25:c7:92:56:0f:88:79:3c:73:
80:12:d5:4a:23:51:e8:14:a3:10:ce:9c:81:9b:df:15:b5:e7:
c0:c3:37:ea:63:91:c9:e5:ca:1d:5a:3a:cb:e6:55:11:e3:e3:
4b:11:64:0b:85:51:04:c0:0b:db:c7:36:78:1c:37:03:b7:32:
b1:ce:05:39:cd:43:69:d2:82:f1:cc:51:e8:df:f6:4e:a4:e0:
94:f9:92:4b:c8:77:6e:84:03:df:ff:9e:64:f0:56:02:0b:1d:
0c:17:b5:02:49:fe:b7:45:f8:eb:3a:25:8c:73:dc:11:32:65:
ef:36:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:17 2025 by rpki-client