Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier: ShVELHgxbaL2FTG+Uv9PVcaVsd85YaEhRxWQHFJ0WhQ=
Subject key identifier: 94:BA:89:C8:D5:82:9B:95:82:02:D6:BF:25:D0:35:BB:53:CC:ED:BB
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial: 0197B88FF0B2E3419C05C48F133E43B0E3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number: 01BB
Signing time: Sat 28 Jun 2025 22:02:10 +0000
Manifest this update: Sat 28 Jun 2025 22:02:10 +0000
Manifest next update: Sun 29 Jun 2025 22:02:10 +0000
Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: AWIVEgneeej/ol9Ot5ymJ/ofOZxNmrbB9JoIPQK00Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f0:b2:e3:41:9c:05:c4:8f:13:3e:43:b0:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Validity
Not Before: Jun 28 22:02:10 2025 GMT
Not After : Jun 29 22:02:10 2025 GMT
Subject: CN=94ba89c8d5829b958202d6bf25d035bb53ccedbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:3a:1d:a2:a3:b3:39:b4:d0:92:54:15:5c:
4b:cf:10:01:48:99:54:dc:37:b6:10:ae:b9:ef:88:
58:fc:09:db:28:92:c7:e7:0e:48:a0:48:ce:06:b8:
22:42:4e:a5:c6:25:fc:b1:f3:b4:87:b4:7a:ef:d9:
65:34:a4:48:de:bc:80:c1:28:8f:35:f6:60:46:12:
c3:0a:11:5b:4e:06:75:6f:56:f9:e4:a2:52:c4:7a:
eb:6c:a6:78:0b:20:e9:1b:ec:3c:53:b8:9a:77:7c:
ba:bc:96:4d:af:d3:ad:8e:cc:19:6b:52:1e:9b:5c:
0e:47:fb:26:b2:c5:d0:ad:8b:cd:6f:1d:04:41:6d:
b7:52:ff:3a:1f:bc:9c:d6:18:c0:59:55:30:73:db:
70:8f:eb:06:08:ff:af:1f:a0:2c:f5:a6:ea:2f:2d:
e1:c0:a7:4d:53:7b:70:38:e1:70:81:57:60:71:61:
ac:66:ab:56:6c:27:39:9f:4e:b8:03:38:8b:75:10:
4e:14:1e:d9:dd:b0:04:e4:80:f8:41:b9:c2:28:b5:
83:89:8d:74:39:7f:01:a6:a0:11:49:ba:d5:38:a2:
6f:dd:38:28:32:15:2e:57:fd:70:06:95:2a:cd:99:
4d:d6:cd:7c:61:60:7d:ed:0c:17:d5:b2:cb:b5:5d:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:89:C8:D5:82:9B:95:82:02:D6:BF:25:D0:35:BB:53:CC:ED:BB
X509v3 Authority Key Identifier:
keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:51:a2:5b:e8:cd:39:61:63:36:94:10:16:46:06:2e:81:
57:64:08:87:80:a5:64:34:3a:2e:4a:3a:ff:47:30:c0:94:6b:
b1:fd:5b:3d:59:00:37:71:d3:88:c6:f0:c4:bb:a4:bc:ea:63:
bf:af:ae:95:c2:98:ba:24:a8:31:8d:1f:39:be:b4:c2:92:7e:
95:6e:22:56:e6:1d:4b:67:22:d8:20:f9:b2:82:df:33:2c:99:
69:80:a5:5a:41:a6:6b:44:c9:d8:cf:1d:a5:de:e4:be:50:80:
1d:59:a3:2f:b7:e8:84:7d:04:0f:35:82:24:a6:d3:f3:72:f9:
54:72:8a:04:f0:b0:29:c4:10:96:97:4a:34:55:fe:4d:a8:40:
5e:1c:e4:bb:89:6f:13:4a:06:53:40:d6:9e:cf:08:0d:ef:ca:
45:62:cf:f8:ef:d8:ae:49:b9:14:36:56:3a:64:3f:9d:84:f8:
6b:60:79:e8:28:9b:9d:b9:68:8d:22:0e:1c:8f:94:84:3e:9a:
59:30:e7:f3:32:db:f5:9f:ca:32:74:eb:cc:cc:ad:22:cc:53:
22:f7:46:64:4e:dc:42:c9:57:55:4c:56:54:1b:2e:64:7d:fb:
80:ea:fc:02:4f:aa:3f:0b:5a:c1:6a:f8:43:29:82:2e:15:b9:
60:6e:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:09:54 2025 by rpki-client