Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: FtuqElw6Ek4dFB6KarcwKA//Lvmh50KwUQRJQcH57g8=
Subject key identifier: 51:8E:99:86:B6:D9:1D:DC:3A:24:12:7C:F5:33:9E:89:B8:A0:AC:FC
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01976C2AAB4221E9FABEB5DE837D73DD3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: M28OS1DyuBoAN9Q0dq2W9cPN0q8nJAYcx371k2JkLyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ab:42:21:e9:fa:be:b5:de:83:7d:73:dd:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=518e9986b6d91ddc3a24127cf5339e89b8a0acfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:d3:b5:ae:4a:6c:cb:8f:fc:9f:7c:84:89:
08:d7:bd:5e:8f:85:23:5e:cc:6c:d9:e4:c1:0a:a3:
42:5c:06:9b:49:44:65:cb:bc:a4:6b:5f:72:a5:7f:
bd:a8:6a:33:a4:1f:e5:15:4d:1d:c0:a1:24:ac:cd:
5c:e5:50:d4:00:0d:95:4f:71:6a:e1:ab:73:67:70:
9c:93:24:29:e9:60:64:e3:f8:10:52:df:67:58:69:
19:f7:b0:26:41:fc:0b:06:f4:c7:12:c9:15:13:16:
47:05:29:72:86:17:55:01:58:67:ae:68:77:50:1c:
da:24:16:93:f6:94:8a:ff:b1:3e:5a:63:63:ee:4d:
b1:82:73:ca:e2:8e:1c:8d:f4:45:86:1c:c6:47:3f:
2d:a4:5a:9c:92:0b:43:73:1e:4d:c8:3f:37:9e:a0:
38:90:b0:a2:14:e5:0e:8d:dd:6a:23:bd:25:48:c7:
08:a9:23:da:29:74:fe:4a:fa:47:f9:bd:8b:f7:55:
94:81:cb:73:56:e2:59:cf:e1:9d:fb:ed:d4:81:05:
34:91:0f:da:47:b1:c4:96:7f:61:7a:36:41:65:6b:
50:f9:59:0c:96:94:d2:14:f5:7a:6d:ce:e3:63:32:
d3:03:0c:02:64:69:ba:99:3e:44:da:0f:50:7c:21:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:99:86:B6:D9:1D:DC:3A:24:12:7C:F5:33:9E:89:B8:A0:AC:FC
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:81:9d:98:58:63:e6:74:62:28:d0:50:75:9e:1a:0a:71:e8:
5e:79:58:8d:3e:eb:75:c9:cd:8e:0c:89:51:4d:21:dd:64:55:
b1:09:bd:d2:e9:6f:21:24:28:e3:09:d4:d8:ed:ac:3c:26:24:
3a:54:eb:d2:94:65:13:4b:72:1b:8a:cb:55:fd:85:de:41:29:
2b:2e:46:90:e4:e9:68:0e:26:c2:d9:f5:f3:9c:11:95:4a:26:
36:97:24:91:88:92:fc:da:4f:3e:d5:d6:5b:f6:5c:b5:d7:6d:
c1:fe:cf:04:e1:92:76:4b:e1:c9:f8:2c:8e:ad:bb:ed:e1:db:
04:8e:3c:3b:70:f9:6d:46:28:ef:9d:da:4b:cc:5b:03:7b:3c:
d2:51:a8:7f:42:d6:0a:4b:2f:e0:e4:7e:24:a7:79:5e:63:25:
2f:fc:c8:e8:9a:0f:de:ec:71:58:4e:4e:b5:18:b5:13:81:92:
31:21:52:83:66:2f:12:f2:35:96:e9:8a:71:9c:96:4d:7a:35:
8b:56:ab:16:3c:91:cf:f0:06:9c:94:61:42:e0:1a:63:f5:38:
78:d8:98:7f:53:49:f3:63:91:43:bc:8a:f0:71:3d:74:91:31:
c7:76:d5:41:23:66:1a:db:7a:2b:50:c4:c2:1f:1e:7b:94:dc:
c1:58:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:43:08 2025 by rpki-client