Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: cx9Okjd0HQlKcglXSIra1Ad4DfCjDBdntytjkAkr+0k=
Subject key identifier: 5B:4E:E2:87:91:16:ED:B0:6F:E4:1A:2E:A5:8C:0C:D7:65:E7:1B:5B
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 0197B6A25629E84A3A967F3C65466DBE2BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: A1
Signing time: Sat 28 Jun 2025 13:03:01 +0000
Manifest this update: Sat 28 Jun 2025 13:03:01 +0000
Manifest next update: Sun 29 Jun 2025 13:03:01 +0000
Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: o8kAN9ZuCBh5jMYxAmpPz1dVhp8sC5w3uahS19QH30A=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:56:29:e8:4a:3a:96:7f:3c:65:46:6d:be:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Jun 28 13:03:01 2025 GMT
Not After : Jun 29 13:03:01 2025 GMT
Subject: CN=5b4ee2879116edb06fe41a2ea58c0cd765e71b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:5e:5a:ed:e3:09:7d:f0:13:64:40:82:2a:
9f:f4:f2:f0:4d:45:9e:9a:fe:f6:f4:12:50:ba:13:
b8:a8:b1:49:68:a6:24:de:e8:80:95:95:30:82:f5:
c4:b8:5f:4b:c5:3b:32:09:66:9f:6a:f9:55:c4:4e:
c9:fa:43:27:ce:0a:28:5b:88:f0:93:10:f2:19:9e:
47:60:2d:c7:e6:67:ad:10:40:9f:39:5e:03:98:36:
da:f5:b0:2a:79:d6:33:ba:60:16:3d:8a:9e:51:71:
ab:fc:42:e2:0a:05:ed:ac:a7:04:f5:bb:66:de:d3:
5f:13:55:0f:6c:27:bf:25:6e:3c:d3:7b:21:f5:1b:
f0:eb:aa:0c:e7:ea:69:2f:56:48:99:45:fd:a6:bb:
15:da:36:f6:6a:bc:5c:0b:f4:20:fb:c0:38:69:ed:
d1:cd:00:8b:f4:97:dc:ec:2d:09:1c:c0:14:30:7b:
62:75:5d:5f:25:58:fc:5d:57:9c:71:cc:ea:7a:5f:
ad:41:ba:ff:c8:f6:7d:05:e4:9c:54:fb:53:27:4c:
25:94:90:cd:a6:31:b2:24:f3:51:e2:85:48:91:44:
6f:e6:d8:bf:e8:7f:f4:c6:66:7d:70:b3:22:c4:9c:
cd:48:90:55:a8:7e:bf:45:d6:15:20:de:b6:45:a9:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:E2:87:91:16:ED:B0:6F:E4:1A:2E:A5:8C:0C:D7:65:E7:1B:5B
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:39:67:5b:b5:19:87:0e:bb:94:1e:c5:a2:c0:ce:a9:cc:
3c:68:e0:84:df:57:ac:22:0e:13:64:fd:ff:4a:a3:42:88:21:
32:19:26:30:4a:be:9d:ca:bc:09:16:61:c9:70:cd:ee:5f:ff:
a4:28:3f:8d:43:1a:5e:f5:0f:b0:73:fc:4f:89:68:55:87:70:
4b:6e:b3:85:70:33:dd:9e:b9:6e:40:c5:64:2a:9c:16:5e:ee:
5e:ba:28:f9:13:50:07:74:7a:80:d8:03:3e:61:75:93:0e:84:
dc:85:91:89:a5:4f:b2:7f:a2:25:47:e7:d2:35:a1:5c:85:4c:
21:98:e3:72:dc:a1:55:a8:10:89:52:fb:c8:7c:4e:e6:cf:f2:
8e:f6:87:0c:c3:91:c4:e7:f6:57:dc:55:3f:0a:df:41:f4:d0:
9c:a7:c8:f1:7d:25:29:41:c5:61:43:af:f1:91:44:47:e4:22:
81:65:e2:54:24:a3:0b:3d:d4:f3:05:ca:92:0c:43:05:67:87:
48:65:66:dc:d8:32:67:6a:ac:db:e3:ea:63:c4:f4:c4:71:aa:
bf:98:44:ba:0c:48:dd:b6:31:96:57:f7:4c:b3:26:b6:7e:18:
4e:f8:23:6f:af:6a:82:27:62:30:ec:22:62:10:c7:f1:9b:4f:
40:9b:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:34 2025 by rpki-client