Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: ogvx1oudK15vRj1z8RbCSYVV7SZkWGiSg4wbETYwslY=
Subject key identifier: D4:CE:AA:3E:5B:E2:42:42:39:2A:03:8B:97:1B:83:15:0E:C4:79:18
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 01978C2509A4AFF4B0170F3B3E673EAC3224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0ACA
Signing time: Fri 20 Jun 2025 07:02:06 +0000
Manifest this update: Fri 20 Jun 2025 07:02:06 +0000
Manifest next update: Sat 21 Jun 2025 07:02:06 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: dJVdBpA/usv1ZT5Bby9IpV26+ea+p+zafUGC9LueP5A=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:25:09:a4:af:f4:b0:17:0f:3b:3e:67:3e:ac:32:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jun 20 07:02:06 2025 GMT
Not After : Jun 21 07:02:06 2025 GMT
Subject: CN=d4ceaa3e5be24242392a038b971b83150ec47918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:b9:3f:70:7e:f1:cc:b4:90:23:3b:8a:fc:
65:36:0e:db:c9:63:75:b2:e5:84:f5:c3:00:26:8b:
aa:48:63:f2:d7:6b:7a:a1:b7:90:90:63:e3:3b:6a:
2c:fb:fb:42:fa:12:f6:f2:89:3c:0f:01:51:e3:ad:
03:9d:e1:b5:37:38:06:95:a8:74:70:1f:86:53:d1:
2f:4a:fd:c8:bf:26:c9:a0:ec:ce:61:d2:0a:e6:2a:
0d:9f:7c:19:52:20:d5:8d:46:9f:56:e7:06:fa:28:
6c:99:07:94:f4:61:87:4e:78:2c:b8:d2:34:65:43:
f2:7c:05:17:cc:b3:06:9a:25:a8:39:b0:13:ea:30:
30:8e:fb:55:f0:49:a4:f1:8c:f1:88:99:9b:a2:bc:
51:5a:19:e0:77:dd:26:f4:5b:39:51:95:c9:9c:cf:
7d:a5:1a:36:8e:7f:9f:76:33:11:98:d7:1f:24:5c:
47:0c:b7:0f:3b:28:ef:70:2a:3d:87:c3:52:9f:9e:
07:83:11:53:ee:6d:f0:c8:ef:38:1b:d3:b0:47:88:
ce:13:28:bc:ed:bd:1b:c1:76:9b:4b:98:cb:2a:7b:
a9:c0:36:c7:e1:98:fd:fe:4c:8e:26:4c:00:a8:d3:
d4:66:29:41:df:10:58:55:50:0d:b3:4d:b9:df:c8:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:AA:3E:5B:E2:42:42:39:2A:03:8B:97:1B:83:15:0E:C4:79:18
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4b:8d:b6:5f:9e:d4:9e:a4:ed:a6:37:1e:8d:d2:ad:33:8f:
cc:a9:d0:56:2a:00:1b:f5:10:20:ef:9d:f9:9d:87:0e:38:d7:
6f:06:dc:86:5a:67:7c:bd:36:e7:bd:98:d0:0e:e1:d2:0a:ab:
28:82:95:00:f5:a5:dd:6d:dd:be:a7:9e:fa:be:81:0c:6a:4d:
7a:32:2f:9f:59:b5:67:fc:8e:e5:53:8c:be:45:13:e0:1f:3f:
27:32:71:31:3d:20:3d:1b:09:09:69:f1:af:ee:b0:09:8e:15:
da:13:d1:d8:c0:ed:cc:33:d6:bd:fc:f3:82:4c:ff:62:22:d6:
97:98:95:2f:b2:4e:03:13:d6:de:06:d4:6d:83:de:a2:c8:0b:
9a:83:46:3f:0e:2d:c3:77:b5:62:ee:85:97:f4:00:12:c4:15:
cf:d6:13:bb:43:1c:f4:0a:1a:df:45:1d:39:50:e3:2e:2e:27:
e3:2e:88:8d:7a:b0:f5:19:0b:14:08:49:ac:53:64:69:d5:81:
f7:0e:25:77:8c:1e:96:aa:7b:23:d2:35:b8:6f:d1:08:cc:fb:
32:32:90:76:75:b2:8e:90:7c:88:c5:41:b2:0d:e7:42:ce:ff:
3a:7f:d4:ac:c9:2b:cc:b3:a6:b2:bc:d3:40:4c:a7:c6:8a:e0:
bf:49:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:11:03 2025 by rpki-client