Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: YlUEZ0PT1IjVPWuzhZmcfFKc522QsgoXwba8dhzw9D4=
Subject key identifier: EB:F6:97:36:66:81:20:09:EA:0F:EF:15:AA:09:26:CD:D3:F2:A8:82
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01976C2AA632BC46CA76C21627CFD3F24198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0C2A
Signing time: Sat 14 Jun 2025 02:00:23 +0000
Manifest this update: Sat 14 Jun 2025 02:00:23 +0000
Manifest next update: Sun 15 Jun 2025 02:00:23 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: YDCddTnfFRkPX2nzu5Uc45WfB8DL0yhX5ZahwKG2Fs4=)
2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=)
3: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a6:32:bc:46:ca:76:c2:16:27:cf:d3:f2:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jun 14 02:00:23 2025 GMT
Not After : Jun 15 02:00:23 2025 GMT
Subject: CN=ebf6973666812009ea0fef15aa0926cdd3f2a882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:71:b8:58:7c:91:0f:4d:42:ae:5f:b2:e0:
7f:eb:c2:57:4b:96:c9:10:48:0f:e1:ba:ef:bc:cf:
60:6d:fe:7a:bb:a8:5c:44:90:eb:f7:28:d5:fa:e3:
f7:90:49:39:0f:f7:f4:d0:7f:1f:09:39:9d:a7:22:
75:3c:96:6d:51:c1:91:f9:7e:c3:43:e0:62:6a:0c:
50:16:5d:3a:fd:c2:5c:29:47:5a:dd:73:5d:33:6f:
32:51:c5:63:21:ae:98:80:4e:a2:af:89:6b:38:f5:
f5:e5:7d:db:d6:b1:be:09:d6:19:d1:9e:a1:48:70:
5b:c8:4e:12:91:04:bd:f3:28:81:fb:56:98:71:21:
e6:69:3c:dd:ae:91:2c:c8:68:a5:86:1c:62:f3:61:
72:6e:55:45:f9:19:1a:10:c3:1d:ff:46:59:61:1f:
3e:87:7d:ca:e0:07:a3:93:6d:d7:7a:8b:57:bd:78:
6a:cc:6c:5b:f5:ef:fe:57:63:26:d8:72:5e:05:37:
19:51:e0:4b:9b:40:b6:50:11:3f:ef:3e:4f:9a:cc:
cd:b3:41:81:f8:95:6a:f1:0b:b1:80:e4:5b:52:51:
83:74:41:2d:e1:e2:6c:2f:ca:24:3e:2d:27:31:b6:
a4:5b:20:b7:c1:20:86:dd:ce:7b:82:8f:87:a3:00:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:97:36:66:81:20:09:EA:0F:EF:15:AA:09:26:CD:D3:F2:A8:82
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:86:4a:58:40:29:c2:c8:3a:cc:f5:4e:3f:ab:7f:af:24:
0d:61:50:16:bc:43:d9:0d:7e:4e:a7:19:a5:ce:f2:fa:01:2e:
c3:84:0e:9f:ac:3b:1b:87:13:94:7e:e0:7b:4b:4a:2f:dc:f5:
66:84:72:e1:89:49:2b:1c:32:6f:db:2f:44:e6:9a:2b:af:fc:
5a:9e:60:d0:85:c9:d9:ab:e6:f9:7b:ca:7b:71:04:4d:14:38:
8f:b3:2d:50:56:a0:f8:89:d3:b8:d2:68:f1:22:e0:c8:ed:95:
b5:ef:50:a8:ac:f3:fc:33:55:32:5d:6a:24:ce:ec:2e:0f:d1:
b1:72:1e:03:1b:f7:48:3c:8d:d8:9a:67:28:18:f4:be:5e:19:
87:44:af:71:cf:ca:ca:6b:02:0b:a5:72:db:23:9f:a5:c3:4d:
4f:38:91:e5:a3:b2:ba:a6:29:d1:bd:71:c6:37:8b:59:27:4c:
99:91:fb:43:f5:eb:74:2a:e2:2c:6f:3a:60:1a:8a:9b:e6:c6:
a1:79:2d:41:80:c0:4f:6c:a0:c1:0a:17:88:c2:8e:e6:5e:ef:
66:6f:54:99:8a:47:43:db:4f:ce:a7:44:1c:08:ab:35:c6:31:
7e:e7:84:11:19:6b:24:c8:59:71:08:5d:6e:17:a1:04:b1:7d:
21:e4:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:24 2025 by rpki-client