Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: +Puxsu2zIBLDWlrcdfvKpegkW6GFe2t+ABU4L/i4f8M=
Subject key identifier: 20:5C:2A:F5:46:CE:F1:31:EB:80:48:41:72:9D:5E:33:1F:67:F6:C3
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019773E42779983353AF6D22541167DD0D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 01E6
Signing time: Sun 15 Jun 2025 14:00:21 +0000
Manifest this update: Sun 15 Jun 2025 14:00:21 +0000
Manifest next update: Mon 16 Jun 2025 14:00:21 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: xjJpSuCfBJrd2spwl02OAHq134sX2JgQf+MjefMLaQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:27:79:98:33:53:af:6d:22:54:11:67:dd:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jun 15 14:00:21 2025 GMT
Not After : Jun 16 14:00:21 2025 GMT
Subject: CN=205c2af546cef131eb804841729d5e331f67f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:36:44:06:85:bb:ce:12:0c:38:7c:3d:55:
5a:a0:3e:f9:fd:3a:8f:8f:48:1d:e9:86:ed:60:40:
89:03:b5:54:7a:1b:d2:76:00:75:6b:2a:19:ad:06:
53:9a:25:17:10:b3:34:3f:7b:7c:57:1a:27:cb:5c:
3d:2b:b2:05:2b:5b:d7:63:e3:fc:72:04:b9:3f:b7:
8c:e6:b2:08:c8:f0:b8:99:1e:32:16:20:99:c1:6e:
2a:e7:82:bc:08:63:da:20:d1:4d:da:5a:94:f6:c7:
88:7d:05:18:97:af:83:0b:40:60:29:f9:bf:5c:11:
61:54:a1:2e:f1:ee:24:ac:4d:4a:70:c7:5c:3e:8c:
40:7f:3f:72:32:6d:6d:b0:68:a2:d3:52:d5:81:5f:
65:5d:4f:bc:1f:30:33:16:76:80:62:4d:6b:86:ea:
99:32:77:92:1f:2a:3e:ac:27:c1:6a:b1:5b:75:c7:
97:99:0a:6c:93:99:79:9f:8c:0b:80:2f:9d:88:a8:
dd:24:38:80:7e:03:b2:80:0a:e6:51:03:76:6a:46:
df:6d:dd:72:60:67:7a:dd:57:3f:9e:28:88:65:0b:
26:84:92:73:a5:f2:7f:1b:6f:66:f3:78:5b:b0:01:
5d:7a:5b:f8:c7:38:60:93:11:ea:c1:10:92:3a:ea:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:2A:F5:46:CE:F1:31:EB:80:48:41:72:9D:5E:33:1F:67:F6:C3
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:f3:34:52:ba:b8:d6:d6:55:86:6b:a6:5f:02:fa:3b:d0:
51:87:f9:18:ff:c3:45:16:83:f9:a3:5f:1d:b7:77:80:c9:1d:
67:92:b0:b7:03:c0:4e:84:89:21:56:54:37:2d:36:f0:1b:9c:
8f:cd:67:f9:f4:7c:b8:16:37:a9:9e:87:93:5c:8c:85:f5:80:
a4:45:27:df:07:9f:51:1a:aa:10:29:28:7b:84:96:01:8b:0f:
cf:d0:90:17:1c:58:13:a9:2c:e2:e9:86:1f:8c:67:42:83:13:
ad:73:1d:8a:b5:f9:08:bb:96:c8:f2:8a:43:ab:2f:c3:f7:71:
74:e6:99:4e:49:dd:b1:b2:fa:2a:a2:9d:9c:17:d6:a3:57:5e:
bb:c9:b9:30:5c:ac:f7:d5:b4:5c:f1:78:ea:53:fc:6a:2c:ef:
85:84:64:ec:bc:2e:1d:81:2f:c4:9b:0a:44:f7:47:02:5d:cb:
61:83:8e:e0:9e:f3:9c:9d:ef:cc:08:77:e7:30:ff:cb:49:d8:
9f:6d:ad:ab:72:54:9d:e4:44:9d:e4:68:70:12:b2:07:4d:c6:
ae:54:72:fa:20:64:e7:a6:80:0f:78:1d:7b:80:20:af:8d:ac:
06:db:50:67:87:8e:ba:c8:1d:48:a5:8d:65:b2:ab:5d:81:20:
dc:61:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:06 2025 by rpki-client