Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: f6PCrOK8tIRN+mqUzrkoK8x1JWCfQ8zQOJxKG/Ry0Bg=
Subject key identifier: C5:F6:AA:72:74:87:93:AE:F3:5A:BA:CF:30:25:58:8A:7D:3A:EC:1C
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 0197CC157BA0D2D975ACDB6E1808B304610E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 09FB
Signing time: Wed 02 Jul 2025 17:00:49 +0000
Manifest this update: Wed 02 Jul 2025 17:00:49 +0000
Manifest next update: Thu 03 Jul 2025 17:00:49 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: bO/hjCnhMuL7P2RJMf0jAKUfDuiYXfP63SujNX1056g=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:7b:a0:d2:d9:75:ac:db:6e:18:08:b3:04:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jul 2 17:00:49 2025 GMT
Not After : Jul 3 17:00:49 2025 GMT
Subject: CN=c5f6aa72748793aef35abacf3025588a7d3aec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:aa:37:04:fe:1d:f7:ff:86:f0:b1:32:98:
e2:44:66:fb:3b:e8:d8:aa:67:34:69:f4:fd:e5:75:
c8:8c:22:b1:50:9d:1e:6a:b0:57:14:44:13:79:f3:
27:5b:89:4c:e9:3e:41:22:ef:00:a6:ee:23:15:15:
7a:43:26:b9:b6:7a:c0:23:8b:3d:28:32:b0:6a:fc:
76:0b:04:30:ca:34:ae:cd:e8:c3:f5:2b:0e:f9:db:
d6:c8:b3:8d:58:e7:5f:bc:3f:1a:b6:37:90:93:94:
65:9b:99:82:52:a9:02:7c:d9:8f:0b:14:c9:e1:31:
64:95:ee:d5:5e:59:65:52:58:fd:d7:51:10:4a:92:
fe:e6:be:29:e2:20:d6:39:bf:95:1d:e4:84:b5:75:
fb:cc:95:82:64:3b:17:22:95:8e:43:36:58:5e:4e:
5f:4c:4f:f9:21:fb:1b:07:1a:72:6c:4c:9b:57:08:
c4:f3:d2:20:d2:48:54:01:49:62:8e:55:41:24:d6:
42:bc:aa:8e:be:c3:9e:55:14:97:92:35:41:7c:eb:
ec:28:10:e7:7f:ac:3f:11:23:7f:c6:3b:aa:ba:dd:
55:68:fc:a7:1a:f1:1a:10:99:08:ff:51:f9:d5:5a:
4b:aa:03:a4:ad:e1:66:fc:8b:d1:ce:cf:b6:e3:4c:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:AA:72:74:87:93:AE:F3:5A:BA:CF:30:25:58:8A:7D:3A:EC:1C
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:77:1a:d5:7b:27:7a:e7:62:e1:cf:cd:91:41:60:8f:95:e4:
45:15:e4:ee:fd:aa:39:33:c5:d1:50:6f:57:22:34:cf:d4:cd:
24:63:82:f3:42:46:f1:8a:a6:5c:f6:b4:6d:fa:54:f4:30:11:
61:bd:be:6c:45:58:ba:2b:d9:95:e2:d2:57:57:41:15:86:e3:
86:51:ae:17:4d:df:9b:f1:11:2d:d8:a7:85:5d:ac:bb:e8:3f:
79:0c:a1:f9:ee:8d:74:7c:09:24:e0:2b:dc:9a:28:35:dd:ce:
66:42:74:33:2f:4a:dc:7e:ef:f0:01:e0:84:fb:c8:db:04:86:
dd:a5:47:7b:fd:27:02:a4:e9:9f:a7:94:3d:1c:82:df:b4:6a:
d9:ff:5b:75:62:ed:d9:ac:96:0c:2c:90:1f:ee:e9:0c:0c:78:
0f:dd:c0:ee:ce:32:54:91:13:bb:c1:dc:db:ca:19:47:4c:c5:
cd:f7:6b:61:59:66:f8:70:03:51:2c:b7:7f:18:71:84:27:27:
5b:0d:9b:89:ee:4d:04:77:fb:09:b5:58:79:55:b1:ea:28:a3:
13:fd:c9:c1:2e:5b:86:f0:36:6b:61:07:0c:58:d7:8e:c9:5e:
2e:c3:63:da:9f:67:8e:eb:99:9b:7f:fd:ad:4a:ab:41:b1:80:
61:8f:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:43:45 2025 by rpki-client