Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: oB279gHAMntnpknr18bkyvjuJQyI3ljcsvGso4bPdf4=
Subject key identifier: 93:83:64:FA:3C:55:CF:DB:E4:FB:DE:7E:47:50:F8:87:87:A9:16:A4
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0197B6A1F5B2ACB3C0327DE9DDFE8E971ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 13C1
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: RuaAGsWaCqI/yQaD2/qABUVqUhZEo39rLdnl8mKCNgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f5:b2:ac:b3:c0:32:7d:e9:dd:fe:8e:97:1a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=938364fa3c55cfdbe4fbde7e4750f88787a916a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:e5:92:cb:a7:98:aa:d5:54:e4:04:24:b5:
39:df:2c:f9:00:3f:cb:eb:8c:21:56:4f:cb:c2:ce:
27:d5:ca:f3:27:0a:6c:4b:80:4e:9c:3b:25:e5:eb:
a2:85:cf:8d:88:bf:e6:21:d0:3e:04:a4:9e:64:d2:
f4:c7:68:f7:67:9f:cb:66:c8:6a:55:fc:5e:01:64:
dc:ca:22:62:32:d2:80:be:da:1e:73:90:3c:94:c9:
66:aa:44:8d:eb:47:4f:13:08:06:98:5d:cf:4d:6d:
74:64:f6:62:40:bd:51:d2:8d:10:19:63:5c:bc:43:
a9:9b:e4:53:bd:40:01:62:a0:1c:24:11:f2:de:89:
f4:e8:05:0d:56:37:dc:bc:3c:3b:d6:e9:cf:36:b1:
a8:33:3b:10:fb:c7:05:40:c6:bf:72:d1:07:f5:27:
b1:e9:c8:ec:0d:df:9c:58:4e:55:86:0e:26:a5:f1:
92:7d:7c:1b:95:38:5b:cc:52:5e:3d:d3:bb:b0:ae:
45:ac:e0:cc:b5:1b:e3:76:52:14:fa:cf:ee:24:46:
83:d4:3e:8a:3e:86:51:ce:e7:46:54:d4:bd:a9:da:
e9:f2:4a:67:2a:a3:fb:3f:1e:ba:8e:75:d7:74:69:
01:be:7e:ca:ae:e6:0b:36:52:39:fc:da:5a:b1:be:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:64:FA:3C:55:CF:DB:E4:FB:DE:7E:47:50:F8:87:87:A9:16:A4
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:84:5a:74:94:46:bf:a0:a2:a5:c3:13:a4:4f:06:70:79:
06:89:e4:7a:30:2d:d2:bb:3e:1f:98:b9:d5:8d:d5:88:e9:c9:
49:27:04:59:26:53:49:3a:8e:94:d1:bf:09:86:16:89:c0:3b:
4c:c5:67:81:01:57:d6:c2:6f:6c:8d:5a:25:3c:ac:eb:c9:34:
2b:30:c0:07:49:7c:6f:52:12:d8:b2:08:f6:6b:a1:3e:e9:99:
5d:2f:32:ca:17:d3:21:97:a1:9d:07:b3:4d:82:10:34:2d:7c:
3c:25:dd:85:8d:0b:0c:83:70:34:63:fb:7c:74:1c:24:99:e3:
bd:1f:4d:57:09:d4:d5:3d:1f:27:c1:9a:32:86:93:ac:0d:14:
aa:cd:c4:b4:45:38:8c:28:6c:59:40:4a:5b:e2:c2:8c:0d:77:
13:a9:80:b2:8b:4f:73:16:7d:8f:3f:02:28:3f:53:85:b3:41:
fd:0b:bf:99:61:b0:6b:c8:11:59:92:96:57:6e:8a:53:89:bc:
c4:bd:ec:15:ee:2c:9a:ec:72:1f:49:d4:61:27:0d:4e:89:f5:
dc:68:9f:bd:5b:77:e7:f5:d4:c8:3a:3d:43:7e:63:11:72:df:
6c:6c:90:41:2d:d1:ea:fb:76:49:9d:ae:e2:9d:08:07:d2:83:
02:93:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:52 2025 by rpki-client