Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: ksung8eMaF5AmybfiL9nYwgYMwaKeh0w6ROYM22lrRU=
Subject key identifier: 97:E4:F2:1D:26:FC:61:D6:C7:FB:D5:0B:B3:DE:F1:2D:1C:93:B2:3F
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 0197B6A0BFBFF8F9F87FE1D421C0534A17CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: qMtJeLrI6fUem+QIByFePCOccv2q6JrzU0UG8ocFshQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bf:bf:f8:f9:f8:7f:e1:d4:21:c0:53:4a:17:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=97e4f21d26fc61d6c7fbd50bb3def12d1c93b23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:cc:1d:9a:00:cb:b5:2e:3a:28:1f:3b:bf:
92:d0:32:9e:dd:58:32:70:4b:30:48:c6:47:e0:a6:
da:4e:90:24:77:df:e5:01:6c:47:d7:e8:da:65:c9:
76:e5:9f:1b:70:56:c7:74:33:83:e0:b3:6e:fb:7b:
66:a3:8b:46:ab:34:73:43:3c:48:d7:c5:8a:a4:ff:
15:c2:59:8b:f9:a1:bc:75:8c:fd:e4:f2:73:22:a9:
e1:e7:94:93:0b:6a:59:48:d8:f9:1c:7b:e9:4a:d2:
e4:99:e8:3b:5d:66:7b:76:4f:73:0d:23:af:76:9d:
d0:d9:82:dc:f3:fc:36:e2:61:df:ff:66:88:9f:96:
ec:e1:a3:15:c9:95:fc:30:55:24:82:14:98:93:e6:
d5:5f:0f:86:a1:e0:89:30:f2:21:4d:66:7b:d4:5c:
03:42:6e:46:82:32:7b:b7:e5:58:b4:c9:07:78:21:
03:b4:16:d1:8f:2a:95:be:c2:58:d0:1d:a9:12:5f:
a9:3d:20:72:6e:66:e6:31:fe:f0:3e:a9:25:97:40:
0f:c6:37:4a:86:9e:0d:5d:69:b2:76:74:c1:ee:1e:
fb:67:81:db:5a:7a:89:d5:4c:d3:b5:32:5d:fb:ec:
3c:37:8a:1f:58:14:ec:49:8e:96:80:e7:f1:02:3c:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:F2:1D:26:FC:61:D6:C7:FB:D5:0B:B3:DE:F1:2D:1C:93:B2:3F
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:67:cf:48:ce:72:47:b5:72:2c:90:87:72:5f:86:31:71:58:
b7:d9:0b:d6:1e:c4:a7:59:d5:6d:8b:3d:49:78:4f:a8:a8:1b:
2f:c2:ad:e4:79:e5:70:d4:d3:fd:ef:de:80:1d:93:c2:3b:bd:
aa:09:53:1b:d7:3a:4d:96:f2:98:d8:f8:90:e3:80:53:7e:e4:
23:9c:e0:39:d6:20:8c:0b:ee:d5:3e:c9:1e:48:37:3c:1b:e9:
79:cb:19:2c:53:35:bf:2a:01:9d:d0:50:70:40:8d:21:29:9d:
6c:22:26:c9:ef:7e:ff:79:0a:f6:80:dd:fc:10:11:09:57:ca:
1a:78:ad:b6:07:5f:a1:b5:55:1e:43:03:83:21:6e:6a:ee:fd:
2d:81:0d:23:0c:f5:20:c4:cc:3c:dc:fa:e5:04:de:c5:f3:22:
db:92:c9:73:c6:01:51:6d:88:f9:25:89:7a:28:75:b3:7e:f3:
d9:bd:bf:ec:03:fd:3f:5e:90:aa:4e:d3:78:4e:fd:a2:b1:a5:
ac:fc:ff:4c:1e:76:aa:f6:2a:c7:4b:37:0d:df:81:a5:3c:98:
d6:7d:00:14:ab:e5:a3:fb:77:ce:aa:d6:61:7c:10:1d:e4:2e:
54:70:fd:8e:6e:80:a9:75:24:12:49:e6:75:dd:83:c5:98:28:
28:32:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:25 2025 by rpki-client