Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: cA57PmMF1XC7Od5dcf4Y+HS6OG9D33ybE8Bos1EQ0As=
Subject key identifier: 7E:72:92:55:36:FF:9A:2D:E7:A7:9F:86:59:E1:5B:89:0F:38:52:9C
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01976F62E916378D281D00A0BACBFB726A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0C80
Signing time: Sat 14 Jun 2025 17:00:42 +0000
Manifest this update: Sat 14 Jun 2025 17:00:42 +0000
Manifest next update: Sun 15 Jun 2025 17:00:42 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: FuQ23hDA81vK7dY64f0qWQwMDKX/aoSJCu0B3UEr4+s=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e9:16:37:8d:28:1d:00:a0:ba:cb:fb:72:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jun 14 17:00:42 2025 GMT
Not After : Jun 15 17:00:42 2025 GMT
Subject: CN=7e72925536ff9a2de7a79f8659e15b890f38529c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:12:9e:ac:28:f0:61:b2:e2:f3:50:de:fb:
94:20:53:c7:25:c7:b3:37:b2:3a:a3:2d:21:d9:f2:
c6:c1:fa:c6:15:9f:32:b0:97:0c:89:7a:86:ba:40:
94:2a:a3:2f:ce:3e:f2:ae:15:4d:03:2f:c6:46:db:
a5:e6:28:51:fd:1b:06:9d:32:89:0f:9d:74:23:8d:
c4:55:70:88:58:07:5c:a8:6d:c0:56:3c:5b:44:77:
01:6e:cd:ec:f3:a8:6b:d2:37:f1:59:05:e0:13:00:
0e:88:ad:a7:ee:6c:03:76:31:1d:89:0a:27:55:19:
1f:89:1d:ca:d0:bf:4c:a9:53:14:a0:ba:4a:40:07:
42:a9:b6:26:c2:cf:e2:33:92:1e:38:a0:9b:87:a7:
55:46:7e:a3:2c:29:dd:67:60:ec:2b:f0:a3:4e:81:
cc:30:1f:73:2d:34:8a:1e:c4:b8:30:da:d7:66:60:
2f:37:72:53:4e:d9:7a:e3:5e:c4:30:55:77:0e:57:
7a:7d:61:f3:02:2f:07:17:60:2d:6b:b6:90:32:89:
3e:4d:12:97:50:0d:de:7b:a9:45:e8:9f:4c:2f:85:
50:59:4e:c1:13:1c:f2:c0:7e:59:13:aa:7c:f3:e9:
fa:62:73:43:2c:6e:65:35:96:ea:38:e5:5d:bb:e5:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:92:55:36:FF:9A:2D:E7:A7:9F:86:59:E1:5B:89:0F:38:52:9C
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:6b:38:e1:82:94:7c:ee:ae:14:8d:33:ed:e7:05:69:d9:
bc:32:df:71:7b:54:aa:d3:49:e5:e9:58:1d:91:45:b9:20:c3:
60:8d:76:45:32:70:9c:dc:67:de:8e:46:c2:6f:35:39:a7:86:
3a:78:40:71:d8:c0:67:20:77:c3:2a:a8:85:e3:f7:41:37:cc:
a7:8d:11:89:e5:c2:28:3f:22:20:80:53:ea:b2:10:65:71:a5:
8c:36:3d:56:e2:a0:cf:4f:ae:1d:13:1f:79:94:09:8a:82:6c:
8e:94:df:39:2e:c3:07:26:3a:4c:21:ba:cb:10:93:7e:de:5c:
78:5e:d8:27:41:10:f1:94:12:54:6c:3c:7f:ca:c4:f4:ef:15:
3e:87:53:85:43:d6:e0:05:ff:ee:a9:61:7b:9e:85:46:f7:67:
fa:83:7b:42:e3:bc:b2:4e:8f:1a:43:bd:8d:72:46:38:72:42:
01:09:0f:3c:8a:cb:df:1b:71:a1:1d:ba:b2:05:48:24:a3:e4:
0d:1e:69:34:3a:36:fe:d0:61:ae:21:4d:07:33:ff:9e:6f:bb:
d8:1b:54:98:72:20:07:f2:94:f9:72:f4:e8:f3:08:0a:1b:d3:
c6:ef:80:b9:60:44:48:d5:f4:9e:da:c9:10:e1:c6:64:7e:7e:
72:c5:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:24 2025 by rpki-client