Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: IfCY2pYSFvGElgmL5mJmzoD0JBWxn7I6cUhmLCZ9eGQ=
Subject key identifier: A2:1A:6B:35:48:22:E2:AB:84:6C:FB:2E:EE:82:0C:19:86:73:97:88
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 0197B70EBCA9E85DD86F9F4EA412C2CF5173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: vhIds+PjCHOTFcs2ZTPrZgsc1eNAH0EawwU9IGkohhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bc:a9:e8:5d:d8:6f:9f:4e:a4:12:c2:cf:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=a21a6b354822e2ab846cfb2eee820c1986739788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:5a:ea:85:97:6c:2f:66:70:cf:d3:10:a0:
a5:3e:9e:04:55:47:4e:f0:28:a7:61:1c:df:d1:db:
83:d5:53:ad:fa:c4:45:c1:f2:ba:c0:27:01:74:95:
54:09:7d:31:3a:91:d7:16:4e:8e:65:e5:8b:2c:38:
13:30:83:c4:01:b9:a9:54:e9:9c:31:b5:44:5a:1f:
24:be:97:48:d6:a9:1b:89:16:50:1d:ce:a1:68:1c:
45:67:90:0f:b8:62:09:eb:f3:c4:45:e7:fa:05:31:
da:19:64:29:40:81:fa:41:73:6b:96:20:e3:2d:b4:
6d:1a:65:e4:1f:06:dd:5c:95:b1:ea:2c:9a:af:7c:
9d:34:00:5c:89:33:4e:17:48:3a:45:35:5e:5e:ad:
6b:dc:91:cf:7d:27:a2:da:7d:6f:79:98:75:af:39:
5f:94:3c:18:8c:b6:fe:ae:c9:65:14:dc:cf:6f:33:
5d:51:2c:b8:d7:36:ab:2b:69:78:c5:20:b2:16:1f:
71:a6:5b:40:ab:96:af:7d:01:66:02:85:ac:df:41:
0a:54:ae:ac:22:c4:7b:11:09:7a:a6:53:dd:1c:46:
a5:3f:cf:cb:a8:ed:5c:d4:87:80:69:28:35:66:bd:
32:c9:cb:6d:ca:63:08:15:af:be:f6:ed:fc:d9:fa:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:6B:35:48:22:E2:AB:84:6C:FB:2E:EE:82:0C:19:86:73:97:88
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:de:5b:e7:87:8f:f6:08:be:ae:b9:11:e4:a7:7c:de:4b:
e2:2c:f4:eb:81:f7:24:87:9b:df:11:11:84:8c:0b:2b:1b:4e:
1e:83:18:e7:0e:cd:60:77:71:6e:9a:88:34:35:9b:14:e0:37:
4c:1c:86:e5:82:57:ff:ab:c5:18:f2:06:cf:a2:7f:44:0a:ae:
d6:be:c1:96:5a:6e:80:8c:61:fb:e7:79:95:80:6e:50:17:4e:
4c:8d:be:7f:30:59:78:4d:ed:16:23:7d:2a:25:c8:98:6c:ed:
40:c6:e1:72:57:f8:7c:6e:7b:2a:a1:13:6f:47:46:d5:ec:36:
41:c4:ad:1d:ec:f4:8a:e1:ea:af:da:3d:03:3a:f2:50:fb:f2:
2d:ee:83:31:70:d7:a9:3d:01:95:db:f2:6c:c5:c6:c5:1d:a9:
f7:fd:00:11:8e:c0:4e:21:65:a2:f0:cc:61:1a:94:f5:33:41:
d4:c3:4a:f2:25:82:4d:56:0c:2f:32:f2:05:65:d0:6a:1a:c3:
52:c3:1f:15:7f:c5:b0:50:76:b7:8d:52:39:b6:40:60:be:f0:
12:4a:32:d7:fd:59:ab:fa:b4:30:9b:85:5e:42:53:33:30:66:
41:fe:aa:ca:b2:19:0f:4e:51:a0:cd:d8:33:ed:64:c4:a4:a8:
3b:1e:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:00 2025 by rpki-client