Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: T9KO04HeWhSGarcpOyXQgtKi393oSQ3DyDuiaUeazDc=
Subject key identifier: 62:A1:5E:51:50:F7:E4:76:EE:57:44:EA:0C:01:11:8E:D2:93:01:45
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 01976F2C625BBFAC7D7D2193DA5E47FDB40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0456
Signing time: Sat 14 Jun 2025 16:01:09 +0000
Manifest this update: Sat 14 Jun 2025 16:01:09 +0000
Manifest next update: Sun 15 Jun 2025 16:01:09 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: 14ICRwLgOqB5i401+4QwRqXLPaJxihVzaWYbY0db+Ok=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:62:5b:bf:ac:7d:7d:21:93:da:5e:47:fd:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Jun 14 16:01:09 2025 GMT
Not After : Jun 15 16:01:09 2025 GMT
Subject: CN=62a15e5150f7e476ee5744ea0c01118ed2930145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:95:0b:29:5d:cb:b6:6f:c5:2b:13:08:0a:
da:ad:45:7c:37:b6:69:0f:eb:54:66:e2:9f:08:e6:
9c:36:0e:b8:c9:09:18:ab:9f:54:ae:c2:d0:51:63:
d1:5a:73:d2:33:a2:3f:8a:50:44:cd:fe:e7:43:1e:
cb:99:b4:87:04:51:5a:a5:0b:39:ec:17:13:f5:db:
f7:43:5a:21:2d:a2:f1:89:a8:3d:6e:5f:3e:bd:3f:
66:88:18:04:14:ad:37:82:a1:32:ad:b2:ab:5b:f3:
96:79:49:bb:cf:87:fc:0e:56:fc:5a:ff:1b:9a:b3:
be:10:dc:79:d5:c7:f0:2c:52:d0:65:10:53:af:0d:
0c:f8:63:6d:d3:1e:26:4f:02:da:24:e8:b0:66:0d:
52:b2:38:c4:4c:3a:a0:93:f9:5d:bd:50:b5:24:d1:
6b:68:e6:bb:ab:14:22:ed:ee:fc:87:5b:04:18:19:
c8:43:65:19:57:7a:f5:62:fc:18:47:99:92:39:73:
f3:10:63:36:d6:22:a9:a0:09:f6:2a:ba:fd:42:93:
2c:9a:cc:c0:8c:e8:7f:ae:a2:7c:c7:a2:c8:e3:d8:
0d:5b:72:5a:7c:37:74:a6:e6:34:c9:ae:85:8f:c5:
81:9e:14:42:0e:03:0f:06:a9:f0:5b:63:92:c4:a1:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:5E:51:50:F7:E4:76:EE:57:44:EA:0C:01:11:8E:D2:93:01:45
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:42:3b:15:14:ee:1d:fc:0f:ce:c0:a8:14:0f:ec:44:6a:
9f:bf:77:20:da:92:e6:c1:b5:12:ab:68:47:c4:2e:d2:d8:96:
4b:24:40:03:b0:c6:de:91:bd:1a:25:d4:ea:e4:c5:dc:16:9f:
4e:43:6e:33:69:98:74:2e:31:fd:1b:54:df:d0:63:46:1f:83:
6a:1a:5a:0c:7f:b4:ce:7c:0b:65:22:6a:c8:95:ab:8b:4f:9d:
48:36:9d:83:31:31:cf:62:f2:c7:1a:3f:c5:af:b3:e4:f8:4b:
51:6c:31:43:00:1d:84:42:6f:3c:83:b6:99:89:eb:99:96:3d:
88:cc:81:8d:32:c5:c8:ab:fe:79:e3:f5:22:bc:f4:39:36:7f:
3e:fd:4e:1c:29:5d:e1:9d:c9:b4:e1:a6:34:f2:bf:9a:eb:1e:
19:fc:0b:9a:98:6c:6c:66:13:9e:06:52:64:8a:4c:db:21:1b:
a1:40:c4:91:10:34:0b:63:c0:37:4b:0b:62:9b:58:19:7a:5f:
b1:30:cb:ad:6a:38:8b:e0:89:c7:53:61:de:10:4d:e3:25:7a:
85:76:59:9a:32:44:72:0e:5d:dc:0f:cf:11:e1:9d:18:96:20:
2a:cd:d6:fe:75:10:0d:bf:24:be:ce:82:54:95:24:6a:34:7a:
08:dc:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:02 2025 by rpki-client