Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: 0spCRb3yOXbuSqio+Q6jQcImngjKwlgpn//4EGwEIHU=
Subject key identifier: AC:83:28:E9:B4:85:FF:85:A5:6E:CC:ED:7C:A4:F7:C0:52:F0:A0:BD
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0197B5FC0BB0CC2F6C90EBC9557E0DDD4A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 052C
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: GcX7v6g2Q0XQMa97/SEGkAOxhDMKmuk3bvkJkVsAxN0=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0b:b0:cc:2f:6c:90:eb:c9:55:7e:0d:dd:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=ac8328e9b485ff85a56ecced7ca4f7c052f0a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:14:a8:44:81:fc:f8:27:32:ec:e2:cf:df:
9b:a2:68:87:b3:80:a0:00:59:a2:7e:5e:7b:11:a5:
f8:cb:ce:17:46:19:78:d2:f7:4e:b0:27:9c:2f:92:
83:84:d0:c6:27:5c:2e:6e:29:67:26:e0:e3:be:7e:
14:4b:aa:fd:24:08:8a:45:45:10:d5:1c:64:6c:d7:
15:af:93:99:a9:8a:dd:09:2e:50:3b:e0:25:b4:2c:
bc:b0:d5:58:18:6c:28:6c:36:ed:7c:9b:ea:61:63:
26:41:59:2a:24:ed:c3:5e:8b:73:7d:81:0d:8d:de:
82:ed:72:9d:cc:2e:22:1c:d2:21:32:6c:a5:6a:eb:
ea:31:b3:dc:ba:7f:bc:9d:db:21:e4:54:f5:36:98:
7f:b4:0f:3f:d5:46:85:57:de:9b:56:cb:a8:bd:71:
51:fd:8e:78:00:43:04:1e:56:15:ed:72:ba:42:c1:
fb:07:98:b0:27:cd:c6:86:73:9b:6f:3e:41:c5:a4:
43:39:a4:01:7c:74:0d:27:eb:7e:d6:74:e2:6e:f2:
0e:60:43:20:22:47:c0:45:99:fb:65:af:a8:8d:d9:
84:d5:4f:c8:98:05:0f:26:42:c8:bd:79:35:cd:f5:
41:68:da:1c:0a:ed:7d:f8:ab:31:bd:1b:c5:d6:49:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:83:28:E9:B4:85:FF:85:A5:6E:CC:ED:7C:A4:F7:C0:52:F0:A0:BD
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:85:ca:93:37:5a:fb:c0:78:30:3b:79:a6:c0:d1:42:df:
2e:48:92:9d:2a:98:5d:02:6e:f6:64:e9:ce:5f:8c:b7:66:03:
a4:b9:e2:b5:45:bf:04:ff:41:67:01:4f:e0:22:60:78:75:ec:
06:06:d6:e6:48:a5:f7:ce:c0:ca:d2:03:79:54:ca:f6:67:8d:
07:70:8b:3e:45:e8:04:12:b6:29:90:d9:c0:28:cd:03:9f:eb:
b5:82:68:6a:8c:cd:01:3b:6e:40:b4:fa:d2:31:14:ff:0d:ca:
5b:34:1e:1d:e2:36:d8:b1:2f:03:f1:42:bc:ca:10:9e:6f:fe:
ac:2d:5a:01:dd:1b:c9:48:47:9e:ef:64:71:8e:74:88:b1:33:
33:82:78:34:8c:29:36:e2:81:cb:24:8f:32:07:e5:ae:cc:32:
9f:d5:60:29:5c:a9:1c:8f:31:68:e8:f4:4f:a6:19:96:9b:04:
3c:bd:ea:c4:03:10:8e:d2:69:89:97:36:05:81:3a:e8:a0:9c:
db:6b:de:7c:43:9d:14:c0:d3:01:23:75:b9:b2:9e:6e:72:23:
af:e4:09:74:e1:e8:43:d3:84:6c:34:69:c9:4b:41:d6:6f:7c:
fa:7f:cc:39:25:47:27:c5:11:df:56:9b:62:80:16:3a:ef:eb:
d3:9d:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:46 2025 by rpki-client