Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: fHOfLa/sSxV1O9c8Sh9InBnRwgtzvSg3JuHVFJHyH74=
Subject key identifier: D6:47:B6:83:8D:AB:38:87:17:BC:02:50:22:C6:9B:57:19:2F:7A:C0
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 0197B77CC01EA0F00F558AC53C12C6335326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 04F3
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: WxqDOFhd2A/yLKhI+I3/lg1/MQMeBw9JjXR9jqs+8XI=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c0:1e:a0:f0:0f:55:8a:c5:3c:12:c6:33:53:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=d647b6838dab388717bc025022c69b57192f7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:ba:c4:a5:14:bb:6d:fe:2a:c7:01:12:31:
85:26:34:b5:4f:b6:f6:eb:a3:6a:56:fc:d6:8d:37:
55:c1:f9:12:91:01:aa:d1:14:51:46:43:34:21:6e:
de:22:78:69:2a:88:d7:1b:37:c2:72:cd:71:1f:c2:
10:f9:01:51:87:bf:5e:a3:83:82:db:1f:9d:2d:d8:
4d:c6:11:52:39:51:ab:b1:12:05:18:6d:6e:c9:96:
14:51:f4:57:48:33:66:81:28:55:d7:07:53:45:ea:
4a:95:d4:31:86:51:46:70:e6:cf:4f:5e:c7:fe:a7:
77:59:f4:fa:79:18:cf:c1:47:ac:52:00:77:d2:36:
89:92:55:b8:80:59:37:20:10:be:14:54:1d:90:1b:
de:6e:b5:ce:91:b4:0c:98:f0:02:9e:8b:b3:3b:0c:
e4:19:2c:88:70:b9:6b:a3:63:d5:db:86:dc:3c:e0:
19:1a:fb:e2:16:2d:95:81:12:4c:66:f8:fe:98:da:
c5:9a:fb:39:78:1c:4f:f9:e5:40:cd:68:10:e5:80:
15:1f:93:84:bd:14:25:5f:3c:ec:c2:35:e0:6b:eb:
43:72:a4:fc:e2:fd:ad:3c:ef:0c:da:65:e3:ce:e1:
76:22:0c:eb:aa:e6:4d:ea:3f:c9:6c:38:cc:00:95:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:B6:83:8D:AB:38:87:17:BC:02:50:22:C6:9B:57:19:2F:7A:C0
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:2b:09:39:61:22:ed:13:16:79:26:b0:95:1a:3f:8d:bc:
6b:b9:0e:7c:bb:33:b6:4e:1b:46:8a:01:fa:c0:c9:f7:bd:61:
c8:50:38:60:02:8b:ce:a7:6c:c9:cc:ef:b3:b2:08:14:c2:02:
79:4f:cc:a7:9b:fc:ca:53:b3:ef:58:d2:b5:a6:c3:a6:22:86:
5d:15:17:eb:a4:f8:9b:66:b7:44:13:a9:bc:e0:ea:72:51:60:
19:89:4b:3e:ea:7d:92:3c:8b:ac:11:a8:d2:63:24:79:1f:5e:
61:e5:8e:b2:da:c8:02:43:fa:d4:05:68:99:2e:2e:7b:bd:cb:
c9:73:30:62:b8:04:34:1f:5c:5c:f0:cb:9d:4c:00:89:6f:64:
09:90:0f:94:30:4d:5e:6c:f1:f9:70:c8:76:01:58:c8:71:ae:
28:64:bb:75:ce:b6:29:bf:3f:e3:23:32:3b:35:44:31:81:c1:
6e:3f:16:35:79:e2:79:b0:38:03:c0:da:13:a7:dd:80:42:b2:
6b:a3:bc:e1:89:d3:c0:72:bf:a8:05:6b:9b:fa:aa:17:15:c0:
78:e5:e5:1d:ae:1b:d5:be:92:49:3e:f1:9d:1d:91:c5:9f:b0:
ed:39:e7:0c:a9:1a:0a:9a:c1:5f:0e:d8:98:33:91:cc:d0:b2:
9d:05:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:34 2025 by rpki-client