Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: 2vo9/m11RlKYYb5e7sCo8pyONL3pVCpEHwW7YUStqb8=
Subject key identifier: CB:66:85:BF:EC:F7:D3:43:32:78:F5:06:B2:0C:F2:F6:9B:B3:91:68
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 0197B6D7907539CEDED3D9A2D27AA31A484C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: TRcZ/vWSBpxoyJhpQ27bAW2iLdt1w2R9tcumNJ3+PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:90:75:39:ce:de:d3:d9:a2:d2:7a:a3:1a:48:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=cb6685bfecf7d3433278f506b20cf2f69bb39168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:1b:17:38:58:93:da:00:3d:c8:ee:9c:8e:
1e:3e:67:a4:f8:9e:74:7d:32:97:e8:45:04:c3:d5:
77:8d:7d:cf:a4:c3:8e:12:e4:d8:63:03:1b:81:81:
6c:a3:8b:61:ee:37:6d:18:04:77:b3:a7:a7:f0:34:
6e:79:2d:c8:50:2e:fe:6f:3f:03:6c:df:e7:f1:3c:
93:21:5b:cf:4b:c0:a7:f9:23:50:53:5c:1c:10:d6:
22:2b:89:6b:ae:c7:b0:f6:ff:1c:67:6a:8f:03:b2:
72:b2:ce:22:48:b7:32:e5:9a:34:96:89:5e:02:11:
cd:33:a5:7e:63:4f:02:5b:0c:d3:2a:68:96:4e:0e:
57:4c:66:dd:62:fa:a0:4d:9c:5a:5e:58:07:cc:5c:
2b:ed:22:e8:54:1f:3f:2c:c0:f0:3d:6f:62:2e:ad:
9a:10:b0:b0:31:2d:f9:73:1c:a3:02:81:07:25:70:
42:07:22:a8:c5:a9:ca:03:f4:4d:af:3c:34:01:96:
b8:8d:1d:26:00:8f:a1:eb:84:0a:53:7e:23:e2:f9:
cb:8c:62:80:36:1a:e6:19:5b:98:cf:e6:91:4e:96:
10:59:d5:c8:b6:9c:ad:38:5d:95:b5:56:d0:e9:fc:
e6:cc:09:4e:74:82:0e:ab:44:67:be:4c:d3:83:9d:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:85:BF:EC:F7:D3:43:32:78:F5:06:B2:0C:F2:F6:9B:B3:91:68
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bc:54:37:b5:5f:69:10:cc:b6:ca:24:c0:27:76:cf:0c:4a:
db:94:e6:1d:8e:b3:c6:c4:3e:cb:5c:da:47:ce:ba:69:1a:5b:
f8:dd:42:27:59:cb:7d:2c:54:85:b4:95:b0:a9:ce:fc:40:82:
88:08:55:f7:56:d3:1a:c7:f6:9e:e3:79:af:84:55:b7:95:3b:
a8:8e:2d:da:55:4b:c8:9d:8d:e0:fe:f1:b6:67:eb:af:03:74:
e1:ee:0e:35:7f:eb:f3:c8:c8:b0:67:be:a4:25:5a:53:1d:b5:
07:02:8c:ed:fc:df:63:4b:af:55:61:08:ae:43:7e:0c:da:c0:
e9:a2:fb:87:b3:d8:f6:14:b4:49:16:70:f7:82:d0:75:b9:12:
4c:f8:38:fb:e1:bb:96:fd:32:ad:62:88:7b:d9:f4:17:fa:6f:
99:60:f8:c3:7c:5a:bb:44:f6:2b:c7:ce:82:9e:0d:ae:d2:41:
50:55:6d:e3:63:d9:94:01:9e:44:ad:c4:36:a8:c5:f6:84:d3:
2f:4e:a9:d0:31:eb:c6:90:03:7d:a9:7a:33:28:af:83:f0:b7:
24:60:3e:93:85:59:20:77:db:03:34:6f:8b:b2:58:25:b2:50:
13:7c:c2:75:56:60:39:4c:7b:b7:95:b4:51:2c:2b:da:07:2f:
a4:9f:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:53 2025 by rpki-client