Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: KeCcBS+/Cud2UYfDwWB8PdGAdo5E6mZ8/cOxt8y/dRo=
Subject key identifier: 64:32:3D:B6:E1:AF:D2:BE:67:55:BA:C8:6A:8D:6C:52:85:61:11:DE
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 0197711A29F4876A6E8377A4C4E5FFBFE9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 01:00:29 +0000
Manifest this update: Sun 15 Jun 2025 01:00:29 +0000
Manifest next update: Mon 16 Jun 2025 01:00:29 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: hLEKg5j6nLSSswtx6/VTajP3ajT7RN3AORfHl3aoUkk=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:29:f4:87:6a:6e:83:77:a4:c4:e5:ff:bf:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jun 15 01:00:29 2025 GMT
Not After : Jun 16 01:00:29 2025 GMT
Subject: CN=64323db6e1afd2be6755bac86a8d6c52856111de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:7d:25:09:f9:f4:da:ce:ff:21:b0:60:ac:
a9:51:bc:ed:f3:97:f5:d6:3e:2a:48:78:c8:79:13:
bc:68:51:ae:96:e4:f1:e3:a7:69:59:7e:5c:d6:15:
70:4d:72:28:3c:4d:2a:97:28:de:8b:05:7c:bd:9e:
d5:cf:d3:cf:c8:19:95:82:16:6f:1b:41:76:a4:10:
1b:55:7c:fa:fc:62:c7:18:07:3b:cd:b4:42:fe:67:
00:6f:20:92:3d:c1:7a:0a:fe:15:43:42:2a:70:b7:
5d:f1:1d:58:7f:da:81:f4:d8:dc:a0:4a:e3:31:a8:
b7:77:4f:23:07:e2:58:4c:02:90:3a:f1:eb:bf:c2:
fd:83:6e:67:9d:a0:65:82:d1:fc:47:a3:76:4b:c6:
ec:f2:ab:4e:d2:27:47:de:33:07:dc:78:88:bf:a1:
2f:54:1d:de:9c:3c:a5:13:6b:20:47:cb:33:40:d7:
49:c9:13:b5:bd:54:57:c8:30:96:55:26:2e:3f:64:
2c:0b:80:b1:50:b7:f1:79:59:0a:8a:ed:25:ca:ea:
77:06:12:ed:80:b7:2a:e1:63:2e:4e:7a:bc:8c:d6:
9a:32:86:a3:fd:25:42:d1:1f:92:b4:e3:e1:c7:0c:
77:e4:4a:c9:a3:e5:1f:0b:ea:d4:64:e9:35:bb:b1:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:3D:B6:E1:AF:D2:BE:67:55:BA:C8:6A:8D:6C:52:85:61:11:DE
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:75:76:44:bf:9e:5c:4a:b3:6d:b7:f2:23:69:26:fd:c8:78:
2e:cf:cd:14:4f:49:36:42:f0:12:d6:ea:df:ed:53:40:51:e5:
16:c3:ff:3e:69:bb:06:56:53:00:36:e1:57:03:65:9f:37:07:
64:3b:b5:ea:d6:25:33:87:1d:b8:1e:d6:5b:30:36:3c:59:9e:
7e:74:4e:5c:3d:fb:c5:4e:1f:67:07:ed:62:5e:1a:14:35:1b:
cc:90:25:1b:03:93:4e:35:3c:e5:19:80:52:68:8e:aa:3e:40:
52:bc:bb:73:e5:2f:cd:8e:44:6e:22:d3:9f:c2:bc:27:8b:99:
0a:c9:b4:4c:8b:3b:3c:c0:fa:e8:a6:65:18:6c:02:69:41:d7:
7b:2c:0d:8a:d5:07:e2:ff:bc:13:08:0a:da:bc:af:3f:dd:fa:
c4:ca:f0:5c:97:82:be:6a:7f:01:4c:45:08:4e:f7:37:35:7c:
e2:ae:1e:84:70:58:01:93:04:03:1e:5d:95:64:5d:60:bd:13:
14:66:4f:7d:29:a0:64:a1:85:da:66:39:de:f2:e2:57:36:40:
7e:a0:e0:e5:04:6c:4b:25:26:77:23:4d:5e:18:1b:ee:9e:b2:
58:23:c0:4d:37:44:fe:c2:77:c0:80:03:e0:38:da:62:fb:ab:
be:25:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:37:01 2025 by rpki-client