Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: cNFwhTpqIgxbtNlJsoIcVJKtTl6a1Dkmcw9WJyvsV2A=
Subject key identifier: E8:61:A5:A8:65:BF:F9:CA:D5:C0:27:BB:C9:C8:0D:3F:60:99:4B:39
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 0197B6A2218F43904AB9BAC639C023F22DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: FD
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: hyBvlXoLyng1ZuOYnKHXsC3kEp20mdsY93mTUnLMcZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:21:8f:43:90:4a:b9:ba:c6:39:c0:23:f2:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=e861a5a865bff9cad5c027bbc9c80d3f60994b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:5b:b8:a7:0f:b8:c4:8b:0a:d0:2c:4e:ef:
09:82:2d:5a:de:33:f2:8d:02:15:9a:2f:70:5f:bb:
f0:9d:e7:ff:7a:2a:98:08:70:74:ab:bc:23:b4:92:
bc:3a:bd:f1:96:70:dd:18:06:f4:cc:89:9b:ed:d2:
c8:69:8f:75:52:84:bc:c6:32:20:4d:d1:7b:d7:a4:
d4:f8:30:ec:c7:62:ab:b9:bb:46:4e:40:91:d4:fb:
7e:21:6b:4f:07:30:f9:f5:b6:3a:dc:30:a4:9c:3f:
af:70:c2:b0:01:d0:17:e9:96:bf:95:e5:77:cd:92:
39:bd:ad:c1:b2:88:f0:f0:12:c5:c3:e2:d0:48:19:
11:4e:16:02:2d:5c:c4:89:3f:ab:db:61:1c:43:32:
a1:05:18:84:99:e0:3e:a8:9c:89:9f:38:42:7d:34:
cd:5d:24:d2:1d:d8:89:c4:b4:8e:c9:72:4f:1a:84:
41:87:4c:10:fd:d1:b9:92:77:60:ee:e6:61:bc:0f:
c9:16:51:12:40:69:e7:99:19:ef:40:d8:f4:d9:63:
25:9a:92:52:ee:cf:a4:f5:0f:c5:58:f6:ee:20:7e:
0a:09:d3:81:f4:0e:1b:ba:bc:41:b1:05:62:a2:b2:
7e:ad:9f:56:5b:21:ba:15:41:93:55:9e:32:3b:9e:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:A5:A8:65:BF:F9:CA:D5:C0:27:BB:C9:C8:0D:3F:60:99:4B:39
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7b:af:0e:04:e6:a0:c1:7a:42:4e:1d:b9:90:d7:f6:8d:0c:
d5:0e:82:58:98:e7:a1:ae:b8:4f:a5:e0:05:65:a0:aa:d7:54:
f6:6b:e3:3a:88:c4:93:f2:5c:7c:6d:a1:36:2b:7a:f8:6f:2e:
35:c2:5a:61:18:31:38:0d:3d:02:84:57:7f:59:41:bb:4d:cc:
65:90:81:67:f5:65:67:86:24:9c:95:13:1c:44:cc:eb:03:37:
79:0a:72:f1:74:55:23:89:79:98:11:f5:bc:e7:64:80:ec:53:
77:5a:d8:fa:dc:60:37:f4:e6:7d:f3:94:85:2e:d2:2c:fb:7b:
a3:3b:ab:4f:c3:b6:2a:29:33:a3:8b:59:38:af:b8:5c:4c:fe:
95:06:91:91:09:8c:07:35:49:3d:d2:b1:61:59:75:fa:f9:2f:
e5:6e:cb:83:15:56:7d:1a:38:46:e4:3b:1e:6a:95:38:75:87:
c1:6f:a1:56:2a:d8:93:1a:b4:07:24:20:c2:10:51:dc:0c:85:
f9:47:99:12:b8:a1:b3:64:f1:29:80:09:8a:1d:db:22:ba:81:
2e:73:d5:1e:81:e0:af:7f:84:e6:84:62:45:cc:c9:92:e9:f6:
61:0a:51:ad:e1:8e:84:33:5b:2d:a6:55:bb:38:10:2f:b2:f0:
50:c6:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:01 2025 by rpki-client