Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: okU61RPKvDVhYsqmuBoMj3SJRXB97pC657yG/Oe8Elc=
Subject key identifier: 73:17:04:52:28:12:C5:11:74:01:ED:33:47:A0:D6:92:13:61:A9:85
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 01977151189503B557C58FCDC4421E3A2B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 10D0
Signing time: Sun 15 Jun 2025 02:00:29 +0000
Manifest this update: Sun 15 Jun 2025 02:00:29 +0000
Manifest next update: Mon 16 Jun 2025 02:00:29 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: u/tJf8SdhGMvJI3Kq+mfGpWK0e8fBu6AdVD4WjRzbMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:18:95:03:b5:57:c5:8f:cd:c4:42:1e:3a:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Jun 15 02:00:29 2025 GMT
Not After : Jun 16 02:00:29 2025 GMT
Subject: CN=731704522812c5117401ed3347a0d6921361a985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:84:b3:cf:7a:c5:ec:48:d2:12:45:59:35:
25:fe:6e:5f:8f:db:67:d2:5d:47:23:56:37:88:b2:
17:49:d1:bf:df:95:1c:a0:33:e2:66:94:1c:6e:04:
87:2b:47:5f:ab:16:e7:0b:54:b4:e1:5b:24:ed:17:
3c:27:4d:75:27:c3:08:b3:dc:d1:e8:96:71:3d:8d:
8c:22:91:ea:ab:40:d4:3f:7a:54:df:a8:ae:43:b8:
fa:fc:27:01:9b:7c:64:cc:75:1e:1c:d3:2b:40:ca:
18:17:f3:cc:72:6a:ac:db:26:68:e3:0f:ca:6c:73:
6e:7c:45:10:0d:ce:e4:db:9d:08:24:6a:ee:43:4a:
bc:9b:7b:65:34:dc:c3:8b:1b:41:ea:f1:44:92:ab:
fc:de:77:59:ea:d9:bc:de:92:ec:e0:b4:c1:33:b8:
f1:73:f8:3b:5e:cb:f6:d0:f3:c4:ed:c0:99:b3:1a:
3c:a0:b3:ec:af:ec:a3:03:77:fa:36:a4:04:b2:f7:
76:b6:25:33:24:f3:b0:d6:05:54:24:54:7f:0f:ba:
fc:91:5a:2f:05:81:a4:33:35:59:89:3b:cf:5c:c5:
60:56:3c:41:0b:b0:e7:40:09:2c:fe:6b:34:5e:36:
54:d9:27:d3:4d:4a:9e:d4:45:42:64:3d:27:32:ad:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:04:52:28:12:C5:11:74:01:ED:33:47:A0:D6:92:13:61:A9:85
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:60:4a:f3:24:25:f0:50:a6:da:1c:bc:0f:64:33:78:87:cf:
39:30:1a:74:a0:55:3c:f8:68:f9:4e:b5:78:09:36:dd:55:a5:
b2:4e:7e:fd:60:14:0f:a8:de:a3:e8:36:04:d3:f2:dd:2a:c9:
d8:fb:4e:f7:a4:66:be:ea:a5:18:08:14:04:7c:74:10:f2:e5:
c0:be:37:52:37:16:df:c3:4c:f7:0d:87:35:5f:2c:70:d1:f4:
3e:a0:07:70:8b:7a:5a:15:51:f5:dd:e3:7b:36:a4:19:39:f5:
de:2d:22:49:ff:04:52:d4:f9:da:35:f9:93:59:41:d9:18:2f:
df:88:f7:e8:d2:7f:e8:32:51:92:4e:72:48:53:bc:ce:6f:72:
f3:71:ba:26:bd:a9:56:63:38:d8:22:1e:eb:45:7f:3f:71:4a:
28:87:21:89:3e:47:f6:c1:19:34:54:d6:5a:f2:82:88:32:17:
f0:23:8c:87:58:0b:fb:f4:e6:1c:63:26:dc:58:2f:44:96:28:
7a:84:c7:d3:54:b6:15:b6:73:01:95:2d:02:7e:2f:0f:ec:9b:
e6:36:c9:f9:f3:fa:a0:ee:a5:62:bb:18:27:5d:3f:4b:c5:34:
56:35:9f:e9:e1:e1:59:64:ec:41:88:17:65:9f:a2:70:2d:d7:
28:e7:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:16 2025 by rpki-client