Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier: yA9UPdv4xJO6g9VCwBFoFqmtZlmR2jDHhtdF+fGH8/E=
Subject key identifier: B1:FE:C5:99:98:ED:B9:34:D1:7A:67:97:3A:E1:26:FC:1E:5B:F4:ED
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 0197B70EFB7CAA8A634F28F01D68F8E8987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: +51mravIPn94vhzXpT9LQsBceQTwr1FqC8UCWm7DXN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:7c:aa:8a:63:4f:28:f0:1d:68:f8:e8:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=b1fec59998edb934d17a67973ae126fc1e5bf4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:4c:c9:eb:9a:ee:ca:5b:7c:d4:f7:31:94:
11:7d:3b:c5:8a:25:1a:1c:ef:96:33:2f:b0:07:d3:
c1:66:b7:64:db:bc:63:0d:f7:47:4e:dd:71:bc:1e:
f5:b0:f4:3d:4b:c9:ff:30:6e:6d:e1:e0:48:32:f5:
b6:7a:62:10:8d:f1:32:ad:e6:2d:77:88:f0:66:dc:
75:ee:64:9a:ca:36:b1:0f:b2:cc:72:95:c3:28:3c:
08:f5:00:75:65:5d:63:24:74:8b:02:9a:96:02:df:
40:79:ed:42:5f:d4:0e:ea:84:be:77:51:fd:bc:46:
bc:33:27:ec:89:b3:c3:71:30:fd:7f:03:9f:0d:d3:
e7:8c:85:c7:c1:9c:2c:ed:0e:61:9f:bc:a0:ef:43:
6b:97:57:19:b1:6f:cd:53:4f:b9:4e:59:bd:35:5a:
2b:68:1f:03:1d:81:be:ad:61:be:13:91:fa:c8:c6:
cf:4d:57:1d:01:4c:7c:37:a0:bc:91:1c:be:fd:66:
f1:5c:72:ce:bd:02:79:4e:e6:2f:36:fd:c3:77:be:
a9:58:39:0d:20:83:27:57:d5:12:73:27:c7:3b:6b:
c9:39:40:56:4e:2e:b8:53:e5:38:8c:c1:49:b4:5d:
c4:0e:20:f2:5b:a7:f4:54:0c:e2:a5:b1:e7:ec:32:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:C5:99:98:ED:B9:34:D1:7A:67:97:3A:E1:26:FC:1E:5B:F4:ED
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bb:a4:d3:3b:84:00:d4:8e:64:45:80:60:93:21:ad:1f:b9:
cf:bf:45:bb:a7:cf:40:8b:7e:ee:31:7d:fd:9e:c3:cd:3b:2f:
4b:f5:56:31:28:fe:d6:57:e2:36:61:6a:b6:19:c0:87:2e:61:
10:17:03:6d:1b:89:a5:e0:00:36:8c:6d:7c:39:87:4c:40:15:
fc:47:34:14:59:17:9c:03:2d:12:fa:7b:78:69:4a:09:b5:ee:
b4:dd:47:3a:f5:a1:f8:ed:de:2f:cd:1d:95:b8:41:69:3a:f9:
06:a0:85:ba:b1:6d:38:12:45:ac:23:53:9c:cc:04:2f:0a:01:
d0:3d:94:7c:f0:22:d2:04:08:4f:46:1a:a5:3a:5d:ef:e4:f2:
85:02:a6:c9:bd:fe:b4:5f:05:1d:3c:9d:73:f3:f3:f1:84:2e:
c1:92:01:58:ac:33:16:cf:d7:a3:48:f1:21:61:78:cf:64:bf:
6e:e0:d7:c8:33:0d:be:18:1c:e0:20:b6:43:71:97:dd:a2:9f:
ef:30:af:6d:85:c4:d0:9f:6f:ba:2f:df:53:b9:f0:8f:b2:eb:
1c:2b:bc:ed:20:4f:77:61:17:5c:e6:94:80:dc:9e:05:0f:38:
9c:3a:b7:9d:a9:a5:cf:61:30:7c:3d:83:e3:a7:6f:d7:e1:7e:
45:3e:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:09 2025 by rpki-client