Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: RGGtWjpAyTynY6PncCd7EvlylnBrQypsa8r1Y2WOmr0=
Subject key identifier: 14:F0:D5:FC:96:51:C0:1B:BC:2A:6E:0A:60:5B:AB:C5:43:E3:B8:B5
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 0197B6D7381E057D71AAB014D47FE3515C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: 0240
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: 7kk6vBjepnIG7x8ky8uhjK96u/jYAiWRew63rPYPO2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:38:1e:05:7d:71:aa:b0:14:d4:7f:e3:51:5c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=14f0d5fc9651c01bbc2a6e0a605babc543e3b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:e7:7c:96:d4:d9:77:15:8b:a3:71:c7:fe:
80:51:8e:d1:45:b4:09:70:cd:17:9d:7b:a8:f3:2c:
06:ff:31:6e:bd:a5:6d:be:07:3e:13:60:6b:05:8b:
3a:1f:de:5b:c2:fb:6d:6d:25:92:72:46:5e:cf:01:
3e:f9:14:6f:22:23:5e:52:43:3c:65:48:0e:10:09:
0a:95:aa:39:d7:5f:f4:14:a4:69:45:20:a1:81:2c:
43:b5:f6:2a:0a:9b:16:55:12:cf:ba:1c:3c:69:6d:
ef:31:eb:7d:5c:c0:b3:ba:0c:94:41:48:37:c1:2b:
82:d9:50:77:6a:ff:b0:40:6e:4f:c1:69:43:6a:55:
c2:a6:bf:db:e7:70:31:a2:8a:a6:fb:ea:bc:fb:c9:
60:76:ec:fa:d0:64:df:d7:82:83:38:0f:0e:45:c0:
bb:1b:89:13:c4:59:82:37:30:92:0a:11:01:c6:9c:
2a:57:18:da:b2:89:d4:85:f2:33:4c:ba:86:60:28:
56:0b:a8:97:91:73:7a:64:e5:65:12:0d:83:e2:0b:
80:44:82:da:ab:4b:55:0b:04:c3:27:db:a5:93:fc:
f0:d5:ae:da:14:cd:77:ef:2d:97:bf:6b:bf:d3:fb:
f6:d8:ee:f1:fd:a5:bf:56:7e:89:09:c5:89:85:ef:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:D5:FC:96:51:C0:1B:BC:2A:6E:0A:60:5B:AB:C5:43:E3:B8:B5
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:28:af:d4:e6:db:6f:e8:8e:6a:77:33:d9:7c:f2:8e:26:b0:
34:89:39:96:0d:e7:8d:b8:ef:e9:b9:26:31:bd:7f:52:e5:d7:
70:50:21:1c:3c:60:c8:9a:48:0d:f5:ad:0a:88:26:57:16:11:
f8:d6:d0:a1:cf:12:1d:d1:c3:b1:2f:56:18:7b:8e:ab:51:f1:
24:b0:84:8e:5a:77:b1:8f:54:d2:5a:3c:94:8f:55:aa:c5:33:
c8:aa:65:24:5a:2d:fd:f7:e3:96:91:60:34:7f:2a:9a:a9:49:
e5:6c:34:01:35:f2:da:c9:a4:7e:5e:38:1c:9d:03:b8:7b:a9:
39:59:34:c4:e3:4f:ae:1d:c7:4a:75:0e:3f:54:a4:8b:ac:11:
eb:ee:49:03:e3:d1:36:bf:68:c1:9b:0c:39:86:ba:d8:26:53:
5e:18:07:07:33:79:4a:0d:ae:83:4d:c3:9d:71:56:de:bc:74:
4f:5b:25:38:a7:98:10:78:94:56:4e:b0:7b:2c:f1:3c:1a:31:
bd:fd:9b:50:ff:89:96:bc:28:b4:c3:d0:7f:3b:0b:79:ce:4a:
99:3d:f8:02:1d:b5:dc:10:74:9b:90:e7:1e:d5:f7:ec:b7:77:
8a:4d:89:fe:16:b5:4f:4f:f2:00:a7:91:2d:fb:c0:86:0d:c6:
58:d6:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:26 2025 by rpki-client