Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: 6hrjpOz8MGMYnjOvC2aStJDTQ1IOY8yobUhT6mcsnMo=
Subject key identifier: EC:BE:2E:59:94:47:E0:D0:2F:C0:5A:43:36:A1:26:AB:1C:17:35:BA
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 0197B632900F3B2D260A2221920EB59E82D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: FwvnAONChULnlbkw7Q6DVZWNWypuoweX2FtNuwMMgzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:90:0f:3b:2d:26:0a:22:21:92:0e:b5:9e:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=ecbe2e599447e0d02fc05a4336a126ab1c1735ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:7b:7d:82:f1:82:d4:cc:1d:a7:79:63:ec:
1e:50:1b:73:61:60:08:5d:df:c9:eb:ff:c5:e8:3e:
d4:e1:79:d1:7b:a9:73:d1:54:fa:ad:77:9e:aa:23:
f8:01:05:95:04:06:c0:51:8c:27:74:dd:5a:e9:c7:
e7:38:51:f8:aa:34:0f:8b:73:df:f5:bc:34:f5:e8:
64:23:11:b6:d1:0b:10:3c:26:bd:c8:86:ca:71:f2:
07:fd:a5:35:de:f3:d4:ab:e1:11:38:3a:34:13:56:
63:1b:6b:ae:70:b4:ca:0a:00:c6:6f:21:33:97:d5:
59:16:dd:e5:05:ee:0a:cc:c1:d3:63:c4:bc:42:d2:
de:8e:19:07:bd:8a:73:97:e5:0e:c0:15:89:1f:68:
f6:fc:f3:a6:91:a5:3b:2c:69:f5:7a:57:dc:1c:ca:
40:fb:ab:a5:93:2c:b1:29:44:b0:81:7d:ec:de:49:
e8:f1:a7:c9:46:b0:d5:a4:70:c2:00:35:85:e8:13:
4e:e9:57:7c:fc:dc:84:d7:e8:6d:b3:07:8c:c9:d0:
af:a3:0c:ac:e5:11:95:a6:85:0c:d8:71:75:36:87:
d9:71:38:24:9c:01:86:94:f1:25:fc:dd:e0:da:31:
39:11:02:34:f2:a8:58:a7:12:2b:9c:23:5d:c2:fb:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:2E:59:94:47:E0:D0:2F:C0:5A:43:36:A1:26:AB:1C:17:35:BA
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:46:02:9e:09:05:8a:88:ee:f0:9e:f8:7e:42:9f:73:cd:c9:
40:7c:4c:d6:c6:be:80:52:d3:3e:1a:7e:14:ab:bc:a8:94:a3:
12:2d:40:a6:65:be:aa:1d:da:66:ae:cf:d7:b5:c9:13:10:15:
8e:88:a4:1e:18:7f:e6:44:4d:d3:bf:3e:6a:bb:07:e6:3a:0f:
cb:83:ed:0c:86:d2:93:a0:f3:39:83:f5:8e:5a:c4:23:05:50:
ac:86:a9:eb:78:42:e5:c6:40:77:f0:5e:9f:c2:c4:33:47:e5:
c5:55:65:67:67:99:d5:28:1f:72:14:02:27:88:16:62:ca:9c:
32:a7:d5:29:85:9f:68:9a:f0:0b:b1:c3:80:01:08:bf:cc:71:
48:3b:69:0e:5b:8e:1e:1f:0c:ee:8c:ba:9c:e9:cf:25:b2:40:
ce:7b:1e:de:ba:00:0e:8d:27:2f:18:57:b8:92:b4:bd:be:ef:
44:15:5e:7a:e5:74:e9:df:0e:17:30:85:5e:54:b6:4a:0a:d6:
e1:5f:47:fe:74:24:98:35:bd:66:3d:d4:f1:d4:c2:1e:30:7e:
53:48:e0:3e:9a:47:82:2d:a8:d6:3c:d1:17:17:61:65:ae:53:
4d:54:91:1f:2f:b0:a4:64:09:47:3a:09:ef:b5:4f:4c:0d:60:
53:3c:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:50 2025 by rpki-client