Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: ZHZsnV3YiGcHJE01G66t8S35I3Ouos9mBkrLkVOwp+A=
Subject key identifier: C0:A3:6C:70:C4:60:31:2E:AA:96:16:F5:A1:FF:B8:6A:CC:63:B9:2A
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0197B88FB8F97B75FEB29B249071083D7597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: 23ch+6ZtzlgT7b1Um1F0ZN9nML3GvvzVbgNGk0ykao8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b8:f9:7b:75:fe:b2:9b:24:90:71:08:3d:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=c0a36c70c460312eaa9616f5a1ffb86acc63b92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:8e:3b:7b:fe:75:34:d4:45:0f:d1:f2:5c:
15:69:98:27:b8:05:2c:c4:39:fd:62:fb:58:65:e2:
d6:d5:d8:f0:0a:fb:4a:67:ec:89:36:70:66:ba:b9:
ad:df:d8:e2:14:5c:6a:34:e8:cd:dc:d1:75:f6:3d:
63:a7:ca:54:a5:69:e9:56:83:98:78:62:7f:04:ca:
ec:bb:c6:72:89:ed:dd:ea:74:d0:33:94:e9:ca:5f:
74:b2:81:de:56:ed:18:05:2f:e1:5c:f8:63:11:11:
b9:7d:73:da:ad:99:51:e2:65:de:ec:ef:67:fc:0c:
a4:d2:d0:d5:98:ff:73:fd:1d:69:f2:c0:14:1c:40:
41:ab:0a:e6:62:05:7f:ee:66:7f:50:3a:4a:ea:c6:
1f:44:1b:36:90:df:f8:77:b9:0f:67:94:af:75:9e:
06:92:56:40:a7:b1:d9:fc:b3:00:5b:0f:c9:f6:2d:
c7:af:4b:b8:6f:92:5d:ea:be:52:d7:ab:01:fd:6e:
2c:be:dd:e9:3d:4f:32:a7:03:4a:37:49:51:1c:97:
0f:b4:d2:dc:63:95:36:33:37:c6:2b:d7:02:07:a8:
96:e4:41:c7:ae:50:bc:dc:69:9c:20:36:c1:7c:b2:
b3:85:07:d5:84:cf:31:2c:e6:e2:4d:84:3d:bc:93:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:6C:70:C4:60:31:2E:AA:96:16:F5:A1:FF:B8:6A:CC:63:B9:2A
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:77:44:ca:1d:b8:53:5e:97:45:ca:0d:63:7c:93:c9:16:
3a:5b:b7:82:46:da:a4:89:56:4c:a7:10:55:1b:e0:87:0d:65:
bf:30:74:5b:80:f9:c3:28:51:5f:a2:d9:ba:20:56:cc:ba:28:
f9:16:dc:6e:e3:5e:e4:54:e9:72:64:a6:03:b1:c3:d8:34:c4:
5f:71:0e:d9:cd:fa:1b:1a:cf:40:7b:61:b8:93:80:23:d0:9d:
50:4b:58:6f:d6:67:0e:3d:d6:84:50:2b:40:0f:dd:4f:bb:25:
12:52:4d:fb:b9:16:38:b0:f7:58:5f:70:6e:ad:43:14:f6:0f:
50:6d:d7:9b:7f:87:63:bf:c2:5d:e2:82:ea:eb:fa:9a:eb:c4:
68:41:e4:ab:7f:64:bc:f2:f7:ee:e4:0a:a0:4c:f3:62:bf:31:
8b:e9:e1:85:f1:41:fc:b7:27:0e:13:5a:7f:06:f4:db:ea:51:
15:02:c3:5c:0d:f4:b9:4c:70:92:41:44:4b:8e:90:dd:cf:2e:
ee:55:dc:ab:05:29:6a:30:1c:1e:4c:68:78:a3:19:5d:02:69:
37:f7:76:a5:32:90:52:6e:15:9f:5b:fd:51:16:8c:8a:0a:b3:
1f:15:b9:36:ee:e1:f9:d0:d5:30:7d:87:4f:03:8d:53:f0:46:
c7:14:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:26 2025 by rpki-client