Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: pnpce2ac84//BnSgWytfHfoH7gd/7TEd9cGmWLHoNW4=
Subject key identifier: A9:E9:3A:72:32:92:EC:88:7D:17:99:94:F9:4A:8A:0B:65:35:A7:6A
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0197722CF2419F1F7FC79F7981F78C8ED54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 06A9
Signing time: Sun 15 Jun 2025 06:00:37 +0000
Manifest this update: Sun 15 Jun 2025 06:00:37 +0000
Manifest next update: Mon 16 Jun 2025 06:00:37 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: +u/WrY7qRkhfIcjdrjs7B0AbHgk2v8tRutEnIRMmGPA=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:f2:41:9f:1f:7f:c7:9f:79:81:f7:8c:8e:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jun 15 06:00:37 2025 GMT
Not After : Jun 16 06:00:37 2025 GMT
Subject: CN=a9e93a723292ec887d179994f94a8a0b6535a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:8f:73:62:a1:54:30:88:50:42:b0:19:44:
9c:29:11:4f:d6:e7:34:ae:53:93:69:34:b6:68:30:
5e:bf:45:3d:88:45:d5:7f:3e:9f:30:55:e4:18:1e:
aa:56:59:3c:ff:5f:54:29:7f:59:99:14:67:f3:36:
e7:69:0c:94:9b:b7:9c:de:de:00:9a:d6:78:9e:7b:
e7:58:5d:6d:15:af:f9:48:63:81:5a:64:ae:10:7e:
0d:cf:bf:ec:68:b1:63:90:e6:e9:63:81:2a:e5:d6:
2d:de:32:d8:18:d2:d7:e4:93:4d:c1:cf:05:b8:97:
5f:1a:1d:15:4c:50:2b:86:84:f5:82:50:bc:83:e9:
57:d3:67:d8:cd:5f:53:9d:01:0c:97:e4:26:8a:8c:
10:9f:8d:02:73:95:a7:4e:1e:8e:dc:9d:72:48:99:
9f:69:72:8d:f7:45:ec:11:df:f3:a1:27:cf:34:24:
68:80:9d:f4:f7:85:11:c4:9b:11:c1:a7:80:9e:2e:
10:a5:50:21:00:e3:4f:1a:3c:0c:c3:28:2c:37:30:
51:fe:88:04:d5:b2:5a:a0:80:b4:ae:a0:a2:10:03:
2b:a2:96:3f:2f:d5:64:ba:b3:c4:01:0b:ac:03:8a:
64:82:c7:c3:b4:cf:44:c4:6e:0c:26:ee:98:e2:e7:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:3A:72:32:92:EC:88:7D:17:99:94:F9:4A:8A:0B:65:35:A7:6A
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b1:ae:4c:d4:bd:70:b0:67:02:db:27:36:05:b3:68:70:1b:
bb:9e:31:16:7c:94:21:07:f9:a9:6b:50:57:aa:47:81:66:fe:
c3:e5:e4:90:9e:54:3a:5f:a9:41:18:37:28:d3:d1:8f:8c:73:
8e:a1:84:3b:87:d1:c1:9c:b0:8a:40:2e:20:44:73:a5:ac:e6:
6b:e1:41:30:e3:cb:cd:c6:d4:9b:7e:6d:e5:21:43:0e:55:fa:
6d:35:cf:d9:e7:8b:2b:bb:fb:2f:bb:8e:4f:e9:73:14:34:5c:
14:3c:67:70:40:d4:d7:cd:11:a0:15:b6:68:4d:a6:51:1c:ea:
4a:c8:33:8a:5b:63:b2:1a:38:49:d0:91:64:45:3d:91:2e:73:
38:ac:bc:40:bd:6b:9e:36:cb:83:60:cd:91:74:6d:87:00:e7:
19:e4:b7:0d:15:9c:50:47:10:55:1d:2d:14:22:8f:8b:12:0f:
b5:47:88:be:e7:26:a5:ba:b7:f8:e4:6e:35:f9:01:88:6f:27:
89:80:d5:a8:11:9a:b6:3e:93:7f:27:3a:70:64:ce:ed:9b:50:
2f:e6:03:9d:58:8f:5a:49:84:f8:d9:2e:2a:0c:2d:6d:2e:10:
74:1e:65:6e:fa:0e:25:b8:c1:e4:23:eb:72:1e:22:3b:e4:03:
ef:a6:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:19:16 2025 by rpki-client