Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: OXycWufc7pQfWhGXLvffvv5aTSUxhNFXD5YIfi8b1fM=
Subject key identifier: 3E:1B:99:88:8B:2F:AC:34:33:12:05:34:AF:F0:CC:44:83:74:ED:FC
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0197B70F09D52BB80459E3680FE0D37CA964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 15:01:45 +0000
Manifest this update: Sat 28 Jun 2025 15:01:45 +0000
Manifest next update: Sun 29 Jun 2025 15:01:45 +0000
Files and hashes: 1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: tZCo90JUREoR8Ss1nY5zvyzCyr2xe8S06q56Iqc3uEI=)
3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:09:d5:2b:b8:04:59:e3:68:0f:e0:d3:7c:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jun 28 15:01:45 2025 GMT
Not After : Jun 29 15:01:45 2025 GMT
Subject: CN=3e1b99888b2fac3433120534aff0cc448374edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:88:e3:ba:e0:99:4b:1a:0b:52:13:77:a8:
7b:8c:50:39:53:eb:69:9a:6b:a7:f4:dc:f5:14:ad:
ed:7e:b3:0e:51:c2:c8:f9:3e:e5:1c:b2:14:ad:45:
b5:54:26:b9:01:10:e1:7a:79:3a:c2:37:95:6b:70:
01:df:8f:ed:ae:ec:1d:4f:43:89:55:8e:81:6a:30:
85:14:66:52:76:a5:f3:8f:0a:66:5b:a9:e6:83:39:
ac:fb:e7:b3:10:12:cd:39:09:8e:fe:4b:e2:af:c5:
ba:77:11:d6:bf:71:15:7d:84:cb:30:23:ae:62:8a:
78:1e:3c:5b:cc:99:9b:29:12:fc:eb:06:e9:fb:1d:
2d:9d:49:b1:17:88:2a:ab:64:77:1e:7e:e4:00:10:
5b:0c:95:56:5d:4c:72:81:69:04:d6:40:25:aa:dd:
eb:c7:85:af:c2:a9:a7:4d:f7:78:bd:ff:b5:e6:c5:
1f:55:89:01:a9:f3:a3:dd:52:02:ad:74:52:ff:ce:
3c:34:f7:a4:37:dc:57:5e:ba:c3:dd:cb:ed:e4:a3:
1c:a6:28:c3:ca:e5:51:ad:99:b4:77:73:8f:03:93:
5e:e4:4d:05:2a:a5:3d:c8:38:92:37:c2:83:9f:9b:
2c:f0:e6:de:79:95:18:94:9f:6c:0d:97:3f:76:be:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:99:88:8B:2F:AC:34:33:12:05:34:AF:F0:CC:44:83:74:ED:FC
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:28:e3:a4:ed:8d:97:7b:57:c9:d1:42:61:16:3c:1e:98:ee:
78:de:ba:b9:a9:ef:87:bc:41:09:ac:54:8b:a0:61:76:e8:71:
7f:a6:65:fe:b5:9f:22:b1:b2:73:25:d6:7c:dd:21:cf:ad:ea:
0d:b7:43:f2:05:16:da:2d:e6:2a:ed:c7:83:15:61:98:78:70:
8f:f6:6d:c5:b3:23:82:5b:a7:b1:7f:f7:9d:08:be:14:69:1a:
cf:49:0c:28:a8:e9:86:69:af:a9:81:d9:6d:bd:ee:03:08:84:
2b:d1:b6:5b:55:97:06:46:ab:c9:81:b5:b3:df:32:bb:51:8a:
25:7a:d0:8e:e9:2b:30:ef:05:8e:37:24:fe:2f:2f:13:20:81:
ff:a8:d6:d6:0b:50:46:c7:50:de:15:44:21:2c:2a:6e:25:d2:
7f:2d:d9:1f:d1:12:d1:39:fd:13:84:12:39:ba:1b:ef:4b:25:
f5:1d:de:cd:bd:02:0f:5c:d1:0b:59:22:c1:f7:b8:7f:81:f8:
86:cc:64:a1:66:e2:0d:48:65:ee:25:cf:22:69:fc:60:e6:36:
75:a8:f2:e0:ab:4d:52:87:d3:b9:15:64:6e:0f:be:6e:cc:41:
d3:72:89:3d:4d:b9:70:68:1c:22:0a:e6:d1:b4:92:bd:c5:0d:
91:51:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:23 2025 by rpki-client