Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: LR4KqSYkxq66AUN2xSncfCHfkhC8VPk765tNWElXALU=
Subject key identifier: 60:95:49:97:2D:77:86:47:39:C4:D5:94:8F:34:DD:FF:E3:18:A4:5C
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 0197B6A0BADDC33CBFFE5F8832FC4907BCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0BE4
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: /ZbOJNBhCm/kHIYsre+B28xDvszK3juShUkwlbBOBr8=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ba:dd:c3:3c:bf:fe:5f:88:32:fc:49:07:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=609549972d77864739c4d5948f34ddffe318a45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:14:bd:74:b6:05:c1:a6:4f:63:e6:00:91:
c4:22:96:26:78:28:9f:53:75:69:77:58:de:0f:b4:
8b:78:9a:ae:66:c5:7a:43:3c:d5:14:5a:25:c7:b1:
1e:fe:8d:ba:ae:8d:59:27:cf:5b:10:dd:bc:0b:fd:
cd:3d:8a:66:67:a7:d5:d2:03:cb:eb:e2:be:f4:2f:
04:fc:47:38:f9:9f:86:81:bc:64:2d:a5:7b:f4:4f:
7a:fc:f9:ba:80:f6:3d:76:90:25:58:0a:ea:7f:58:
84:08:96:c0:67:89:5f:ba:04:83:e7:c8:45:2b:1c:
ad:a9:11:62:4e:79:43:25:aa:39:7a:eb:d8:f8:4a:
17:54:ae:77:5f:fe:fd:bf:b4:58:97:5d:0a:b0:1b:
be:48:2d:b4:3d:b3:13:f7:d6:67:9b:f3:e9:a0:85:
a7:d4:44:63:60:24:71:77:23:09:9c:8b:f4:ab:f4:
5d:6d:a8:3c:0c:37:bc:ab:e7:95:f3:be:66:7c:4e:
1a:a0:89:33:38:ec:3b:48:eb:27:bc:e5:f9:b5:eb:
12:4b:8e:f9:49:cd:80:9a:d8:19:84:8a:10:fd:3e:
b0:5d:3e:e8:65:8d:0d:a5:b3:87:26:c1:57:7e:ed:
61:93:60:9c:1c:ac:08:f8:71:0d:b2:22:a0:4f:9a:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:49:97:2D:77:86:47:39:C4:D5:94:8F:34:DD:FF:E3:18:A4:5C
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:2e:c0:47:05:d4:4c:f5:fb:5e:84:4d:29:e3:3b:13:4e:
c5:52:9e:73:8a:a5:a1:5d:1b:b2:20:b6:df:d7:b3:40:ef:ed:
b5:8c:c5:5d:37:59:a4:ff:5e:7d:fd:55:eb:5f:7a:1a:a1:8a:
ff:cf:93:35:44:22:0e:7e:e1:9e:2f:41:6a:dd:37:3f:e4:50:
fd:63:22:37:6a:80:9a:f4:0d:4c:7a:79:4e:0a:95:69:a9:fc:
b1:35:04:e7:fa:13:58:e7:e4:0f:2e:b2:7d:fa:81:fb:9d:06:
56:63:f5:d4:a4:8d:ec:0e:27:96:1d:55:99:50:df:37:49:08:
20:bb:0c:09:77:88:cc:b9:41:71:ad:17:ca:bc:c0:0b:ab:8a:
f7:0f:77:0c:6c:a6:33:ee:28:a8:35:85:47:d3:eb:3e:c0:d5:
6e:5f:22:73:b0:3e:11:7b:c0:74:f5:ab:82:46:88:87:80:4e:
db:d3:07:63:0a:7d:9e:92:cf:8b:e4:82:aa:fe:56:ec:bf:f4:
ba:8e:27:ef:83:74:38:47:3f:c2:aa:50:61:52:e7:42:14:5e:
96:aa:95:8d:1f:a0:0e:bb:b4:da:bb:80:fb:d2:73:be:36:ed:
8b:12:3f:d5:2e:b8:d7:d7:0d:dd:35:af:27:18:56:18:13:48:
81:f4:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:59 2025 by rpki-client