Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: gBetTJVXC5BQDMCdVn2JEgvs2casUbrqsKoT96R/Q4s=
Subject key identifier: 1E:C1:B6:C1:7F:0F:FA:D0:8E:42:B1:6A:33:6E:3A:7F:D5:9A:83:1C
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 01969E63517412E42DADDC68C2B20AC8298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: 6C
Signing time: Mon 05 May 2025 03:00:31 +0000
Manifest this update: Mon 05 May 2025 03:00:31 +0000
Manifest next update: Tue 06 May 2025 03:00:31 +0000
Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: isnkgX+IHWJEoylvvyx2i1uvDRjYCDP9cu/Uye2REz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:51:74:12:e4:2d:ad:dc:68:c2:b2:0a:c8:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: May 5 03:00:31 2025 GMT
Not After : May 6 03:00:31 2025 GMT
Subject: CN=1ec1b6c17f0ffad08e42b16a336e3a7fd59a831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:78:6c:33:90:f7:c3:84:55:ac:54:3f:cb:
08:83:9d:d6:ea:c1:58:67:78:79:0e:4e:ec:28:68:
e7:d8:2c:ff:ba:cc:e0:0f:f6:9c:14:c8:32:be:7f:
23:08:cb:44:6b:86:52:aa:61:45:58:32:e1:1a:e8:
32:41:ea:5b:e1:c3:48:6f:42:7d:01:46:de:e1:4d:
0c:61:d4:01:73:e7:64:f8:56:13:13:78:40:68:97:
f9:be:29:72:a5:3f:18:14:8e:9d:39:8b:48:f2:84:
c9:79:9f:0e:72:a4:2b:18:ab:7a:5f:4a:58:bf:5a:
17:a2:2d:28:b6:3a:d3:b1:bf:c0:44:df:d2:d3:ad:
cd:8d:c1:b0:bc:fa:cc:37:ce:35:a5:6d:20:45:04:
7f:18:59:5e:6b:d3:91:69:f8:31:4f:dd:00:85:04:
0e:38:f5:a0:e9:1e:c1:9f:3a:dc:26:89:dc:26:6a:
7a:a1:62:47:57:72:b9:e4:89:7d:03:4d:db:38:df:
1d:14:25:b5:87:ab:a8:4e:a6:db:98:62:f7:be:43:
80:6a:28:f5:1f:2d:d4:5d:d9:02:4b:b2:b8:3f:24:
2e:56:4b:f5:c4:54:57:ba:c2:15:7d:e6:3a:35:fb:
03:63:03:b6:cb:4c:b1:a1:c5:04:c6:85:b3:0f:52:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:B6:C1:7F:0F:FA:D0:8E:42:B1:6A:33:6E:3A:7F:D5:9A:83:1C
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:cf:f3:f4:aa:8d:c1:01:94:40:63:8c:9b:d4:97:ea:05:
00:ff:e2:05:6e:a9:65:94:36:e1:32:50:5b:04:5e:19:46:6e:
3f:03:be:e4:f3:09:18:58:7e:03:e7:d5:f4:d8:ee:99:a7:c5:
59:9e:92:b8:ef:53:55:21:40:88:9b:6f:46:12:68:07:16:7a:
a2:78:e4:1d:75:fd:08:a2:79:e4:c1:e1:4b:8a:0c:2f:d7:a5:
79:13:56:f4:24:3c:4d:f9:f1:e1:1e:6b:af:f8:11:2a:da:f0:
f3:6b:bc:aa:78:92:d3:eb:5e:4c:32:7e:92:53:2b:54:c4:8e:
93:89:10:7f:4d:3e:70:33:83:a9:42:32:22:d2:8e:c1:c8:88:
48:ca:33:6a:1d:f2:21:d8:d3:46:03:50:31:be:fe:e5:87:33:
49:88:e6:2c:7e:c2:d9:3a:2c:c5:c2:71:83:eb:66:10:49:d2:
c7:1d:49:a0:1e:10:d6:99:4d:b8:66:30:26:f9:f6:3c:da:b7:
c4:00:47:67:88:c6:20:15:d3:49:5e:34:53:3a:6c:d1:7c:24:
3d:a8:fb:53:2b:d1:21:00:1e:f2:5b:fe:b7:fc:db:76:35:b6:
21:b2:33:f5:37:e7:6c:97:33:9d:cf:0c:05:26:f3:31:4a:d2:
e3:47:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:38 2025 by rpki-client