Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: t6BBPeokSpy5EV7SBznA3ZDM6Rqat8/ipY6esj9iaiM=
Subject key identifier: 43:CC:FF:CB:12:3E:9E:08:24:CB:9E:B8:D1:17:31:B2:00:1D:75:35
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0197B6327C1C00D091B6752E1BF27D80BDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: WXQ1ayBV1rGGtBy//k4EqfnQrU2E/Bdnzx+Aih2zJUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7c:1c:00:d0:91:b6:75:2e:1b:f2:7d:80:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=43ccffcb123e9e0824cb9eb8d11731b2001d7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:3e:71:2b:ab:0d:19:ce:25:d2:2e:ee:da:
4c:28:b1:29:67:1a:0e:2a:78:25:b7:5d:fb:94:8b:
1f:98:2d:58:4e:06:7f:b1:c0:b5:65:ac:b1:02:bb:
d0:7e:6d:d9:21:22:82:17:9b:ed:d0:87:da:85:ba:
3e:f8:2a:1f:d4:cf:b8:26:89:8f:b3:6f:90:35:a5:
5e:92:88:a4:c8:94:38:ed:35:de:46:02:99:cc:64:
aa:69:ae:16:15:35:8b:b6:04:80:a8:97:79:4d:c3:
89:ce:84:a3:92:4d:76:9a:ba:21:ee:0c:85:d6:ab:
60:47:e2:52:6c:1e:4d:17:4a:91:40:3d:f3:42:8c:
6d:6a:d3:df:2d:86:f2:ae:e5:36:44:26:45:18:29:
39:10:8f:e7:48:78:c4:ec:82:81:07:d4:f5:33:d7:
cf:48:5d:59:26:55:61:de:59:38:0d:09:d2:63:b7:
1c:35:e8:59:72:d8:d7:1b:3f:75:21:68:a5:4b:9e:
2b:33:7b:31:97:cb:a5:18:6a:f2:69:07:1d:65:2a:
f6:39:7a:ad:0e:80:bf:51:c9:df:7d:61:cd:13:0c:
20:80:6b:14:47:46:5c:76:33:e7:a1:fa:e3:39:f7:
71:51:c5:54:e3:3c:cd:12:62:f2:8a:7c:70:f1:cb:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:FF:CB:12:3E:9E:08:24:CB:9E:B8:D1:17:31:B2:00:1D:75:35
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:41:fd:ec:7d:bf:61:77:b4:50:73:44:ac:3b:2f:b2:ae:3d:
76:59:05:82:a2:20:8e:24:39:72:08:88:80:c1:58:78:fa:86:
50:b0:8f:95:df:f6:9c:60:ab:64:e0:b5:0a:af:94:07:b6:8b:
94:f0:eb:80:ec:d5:d5:fe:ca:41:cb:c0:24:61:94:05:79:84:
98:5e:d8:e1:f5:d9:08:80:27:53:63:a8:99:ff:8f:de:51:f5:
c7:0f:53:90:2c:2e:89:7b:6a:7d:f4:83:26:2c:fc:e3:a0:bc:
87:16:bc:0c:93:00:7a:3a:dc:a4:58:62:62:c2:7b:e8:8a:7c:
a4:b1:c3:e4:41:73:5d:70:8f:03:55:d2:34:07:c6:82:f4:e9:
96:dc:6d:2c:e0:bf:1c:61:5d:a9:5d:9f:c9:92:c4:54:fc:46:
92:1d:f7:26:cc:d6:2a:d1:53:95:18:cf:f0:30:80:ab:a3:2c:
a7:a6:ce:10:59:ff:4a:8a:30:f6:7d:7c:92:f5:68:ff:91:09:
7d:b3:5d:60:4e:27:04:01:8e:f0:90:d2:e9:35:56:e7:8a:56:
9d:3f:76:db:e8:7e:8e:de:90:e7:4a:0a:fa:35:d1:12:87:2d:
ca:75:c2:9f:31:1e:08:43:c3:50:38:f0:01:87:25:e3:8d:37:
57:cc:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:34 2025 by rpki-client