Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: 061NLO48eDiiQQz0Ex2wR7SnasD5bE0b39xa9X/Nwjc=
Subject key identifier: 09:C9:F4:27:3B:C8:18:FB:B0:68:33:F5:B0:5F:B7:92:0E:5A:A2:2F
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 01976EF4CECBDC64E52E451A18206F766473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:26 +0000
Manifest this update: Sat 14 Jun 2025 15:00:26 +0000
Manifest next update: Sun 15 Jun 2025 15:00:26 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: tG+Ji3h/5fxenJNUCNb9D1RtmPHkNrtsDX2lkk+vNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ce:cb:dc:64:e5:2e:45:1a:18:20:6f:76:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Jun 14 15:00:26 2025 GMT
Not After : Jun 15 15:00:26 2025 GMT
Subject: CN=09c9f4273bc818fbb06833f5b05fb7920e5aa22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:ee:7b:ad:0b:4f:80:68:19:ab:16:70:2f:
ce:7f:c6:35:12:ee:e5:cc:8c:b9:50:91:48:dd:3a:
7d:90:a8:33:e9:5f:51:8e:2a:07:03:21:b7:7c:80:
6e:ac:73:b6:e5:98:53:89:39:8e:23:7a:d0:30:6f:
f0:bb:0b:f4:b3:54:f7:46:de:0c:f1:7a:66:01:22:
53:a5:c3:53:e5:1b:fd:11:6c:be:fd:e3:1b:ef:9a:
8d:1a:fa:d5:82:90:b9:5f:b9:cc:54:60:c0:31:d1:
1a:30:ac:e5:09:be:2f:ae:fe:ab:25:94:98:45:70:
2b:a6:4a:c8:7f:11:a0:b9:5e:52:9d:59:db:6e:d8:
83:e0:87:6c:92:77:8d:97:a9:02:ab:81:f7:d2:ef:
ec:82:9c:2a:37:a5:e5:43:fd:1e:51:3d:3f:c1:80:
9c:c2:b6:32:c7:65:e5:df:b9:bf:82:42:2f:68:2a:
ef:0b:a2:4d:43:c2:06:b2:9f:7b:02:6c:e8:c9:a4:
61:78:4b:26:51:95:d2:90:6d:10:8e:0f:37:30:89:
80:2e:8e:ca:23:8b:cd:e9:8a:90:89:4e:d5:9d:65:
cc:3c:97:4d:6c:d1:20:fc:88:0f:55:5a:1c:14:51:
e8:d3:9d:eb:f9:d0:7b:2e:25:61:ca:c5:da:8f:e6:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:F4:27:3B:C8:18:FB:B0:68:33:F5:B0:5F:B7:92:0E:5A:A2:2F
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:cb:84:9f:54:f8:9d:c9:3c:be:e6:23:a3:32:7b:c3:d2:
24:33:25:6b:7e:97:e6:53:bb:bc:27:36:d8:9b:3a:2d:34:ca:
67:af:f6:51:d1:4e:c9:0c:41:99:11:1d:4c:2d:49:3e:c4:20:
55:fa:1d:31:20:06:ee:c0:a4:59:2f:fe:9b:4d:55:fb:73:91:
77:01:fc:c1:24:44:6c:1d:9c:86:1e:33:de:79:d7:9b:95:cd:
43:63:2d:a6:5b:3a:0c:5f:6e:f4:29:14:e3:34:1c:e0:32:5c:
e0:98:9a:c0:56:75:f7:0d:61:eb:cd:a1:de:12:a2:9b:14:0a:
e0:d5:0c:14:5a:2b:25:17:9f:46:16:c8:fd:d9:d9:a0:ca:ca:
97:79:2a:a3:4c:13:16:6a:c5:87:a0:34:20:83:f1:af:53:91:
84:e0:94:b0:40:ee:a7:f6:33:9a:5c:ac:06:fe:bf:ed:c5:61:
a7:05:aa:ce:90:2f:a1:52:3e:b2:2f:cf:74:06:4c:b2:79:81:
6b:80:83:bf:f9:71:37:bc:a7:e4:98:22:f3:32:c5:f7:92:76:
b4:f1:bc:fd:80:41:1d:01:89:fe:fc:27:a9:47:47:c8:08:e1:
2c:95:46:c7:21:0c:f8:a7:f3:95:04:fb:4c:31:87:64:5d:33:
1f:a4:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:04 2025 by rpki-client