Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: tOkuaYJASSXaV9b1p4JVsrlm11DPh1k7qxp8JQI5wqg=
Subject key identifier: 76:3E:51:70:F8:1A:DE:ED:54:3F:85:4F:A2:C5:3D:98:C2:E8:67:AA
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 01976C98FE519889A31F9085B22D38911121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 12DD
Signing time: Sat 14 Jun 2025 04:00:55 +0000
Manifest this update: Sat 14 Jun 2025 04:00:55 +0000
Manifest next update: Sun 15 Jun 2025 04:00:55 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: qzemYds1kq5hop9AsVC8KTQttDqkiJw+2yPjV3JPNxY=)
2: FtcuzKMMTKsG4IefMTUbvthdvHQ.roa (hash: fh/bmOX6Q7urxhPxPp4WqcpQdlVctOh99ozTUlRP7Pc=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:fe:51:98:89:a3:1f:90:85:b2:2d:38:91:11:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jun 14 04:00:55 2025 GMT
Not After : Jun 15 04:00:55 2025 GMT
Subject: CN=763e5170f81adeed543f854fa2c53d98c2e867aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:fc:52:b8:ee:1f:a3:46:7e:44:3a:9a:c5:
48:e9:ea:5f:29:89:71:14:9c:6d:f3:c5:17:30:f2:
17:bb:8e:68:03:45:c7:e5:00:53:dd:b0:3b:52:ca:
50:94:52:73:c1:ec:88:a6:56:f7:d5:3c:b1:41:f8:
4a:2e:02:8d:1d:f7:28:39:43:bc:56:f7:c1:30:f9:
54:4d:0b:ed:d5:b0:49:f0:28:ff:71:c6:12:78:9b:
0b:ff:44:10:fa:6a:16:79:85:b9:cf:d4:5d:29:09:
fb:a4:f3:1a:61:d6:4f:08:a3:3e:a1:0c:66:3a:02:
0b:ac:a6:26:a0:76:34:f6:ab:74:1d:9d:87:7a:c1:
cd:d5:a4:e5:ed:3a:af:ea:1a:59:e0:bc:89:ff:e7:
48:7b:b7:d9:c5:53:60:65:c1:ca:99:98:d6:b9:cc:
2c:91:7f:3d:f4:30:09:f7:1f:96:ac:6f:55:27:5d:
f3:57:b6:2a:94:25:e8:4d:a6:05:7b:d1:11:b8:07:
46:9f:1b:1c:13:57:ac:0b:84:72:1e:36:12:b6:ed:
49:77:ce:82:9e:51:bf:d5:bc:2b:30:fe:88:4e:20:
0c:42:09:be:89:51:65:71:68:8a:2f:1e:5c:e5:a9:
55:b7:07:75:fb:4d:c0:da:69:8a:6c:39:28:42:33:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:51:70:F8:1A:DE:ED:54:3F:85:4F:A2:C5:3D:98:C2:E8:67:AA
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:78:99:f7:6d:a6:56:a5:9e:f8:f5:18:9b:d1:c7:c5:14:
40:49:cf:e0:9e:df:8a:5f:29:8a:01:94:dd:d7:06:45:c5:a3:
5b:20:75:89:b8:a7:ce:4e:c6:99:91:5d:99:76:b6:00:65:2d:
27:86:15:22:14:b6:73:24:3a:20:d1:ac:56:1e:68:20:dd:37:
1e:75:be:4b:90:63:b5:fe:48:2e:52:d1:e1:b3:f5:9e:a7:07:
dd:32:bb:51:b0:de:a4:2b:c3:63:21:e6:d7:f6:dc:e0:3d:1c:
74:6c:b4:1b:71:a4:86:aa:6d:79:1f:f8:b4:2a:10:59:25:74:
ef:7f:b7:84:b8:7d:4f:04:b1:a7:28:15:38:80:b2:45:55:18:
95:c0:32:4d:5e:b2:60:9d:42:45:3e:b5:69:36:db:77:85:2c:
39:c8:c9:e2:a6:c6:7f:5d:a4:5d:f3:05:af:64:66:07:91:a3:
6f:e5:2d:4a:95:57:e4:2d:88:da:96:83:3b:d1:42:f2:da:28:
4e:13:78:92:df:8c:83:9c:cc:c8:15:5b:5a:68:56:76:49:e2:
a9:cb:ba:fc:a5:09:f3:cb:b7:80:b8:f5:41:f8:4c:e2:66:78:
75:77:28:86:c2:a9:a9:5a:5a:d6:05:4b:86:cd:26:3d:36:0c:
f3:44:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:19 2025 by rpki-client