Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: c/bYbqu011PxcDeyszCrV4S4Kmh3JMlEI/E6WA1sMXI=
Subject key identifier: 99:12:0A:0E:25:28:E9:B5:23:8B:2E:A1:09:C6:BD:DF:EF:5D:EA:87
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 0197955DEDC00B636F67014A8DEDEBE75B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 12DA
Signing time: Sun 22 Jun 2025 02:00:50 +0000
Manifest this update: Sun 22 Jun 2025 02:00:50 +0000
Manifest next update: Mon 23 Jun 2025 02:00:50 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: 5sO3Jo4u2Mf0cSY2LFhBhtfkVqvpIsob6ZqYeyZg8/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:5d:ed:c0:0b:63:6f:67:01:4a:8d:ed:eb:e7:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Jun 22 02:00:50 2025 GMT
Not After : Jun 23 02:00:50 2025 GMT
Subject: CN=99120a0e2528e9b5238b2ea109c6bddfef5dea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:bf:4f:cb:5c:89:d6:e2:9b:3b:4b:01:75:
23:db:60:6d:7e:08:a1:86:d8:c5:81:2d:fc:35:0b:
bb:95:1d:bf:6e:3c:58:d8:6a:6b:74:97:3c:5d:54:
1b:cd:42:40:14:42:aa:b7:83:b6:62:4f:15:63:67:
f8:ab:dd:22:29:69:f9:66:93:36:82:32:d3:55:b0:
a3:68:c9:47:d4:3c:ba:d9:6c:a6:62:43:c8:74:c8:
83:e9:e4:aa:94:7d:9d:b0:30:b9:34:e1:e4:cf:86:
e3:a9:77:cc:94:25:3f:64:ac:b8:4e:c7:e8:15:66:
2f:3a:be:82:fd:3f:58:70:d9:97:0b:0f:ca:26:d3:
ae:95:52:92:c4:1b:07:d3:3d:4c:35:bd:e0:cc:43:
24:93:02:2b:58:f5:65:43:09:35:54:6a:14:43:e1:
d7:1d:e6:b2:24:46:25:a4:fe:43:c8:bd:bb:d6:a5:
fb:b0:1a:dd:47:86:73:8a:04:51:8a:c6:a0:e0:aa:
67:e8:dd:ba:e0:b4:34:05:4c:d1:4a:56:5e:fc:e4:
9c:4a:02:d4:e6:df:e3:01:89:29:e5:5e:c7:a5:3e:
33:8c:8a:6a:7e:36:ba:17:0c:7a:c2:83:19:d2:31:
db:f6:5f:d5:01:b5:c6:16:77:8e:b7:6d:0a:16:2a:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:0A:0E:25:28:E9:B5:23:8B:2E:A1:09:C6:BD:DF:EF:5D:EA:87
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:8a:f1:19:0e:13:ae:fc:a3:51:fc:1c:0a:50:6b:74:ec:
91:bc:9a:f5:7b:93:ee:1d:37:8d:8a:05:01:3a:3c:ce:c0:ec:
5a:66:26:e3:80:e5:71:aa:9e:a8:c0:39:c4:26:6b:c7:87:30:
a6:8f:ea:44:a5:2f:50:77:19:46:12:f6:ec:16:c4:91:de:e8:
a2:9d:78:6d:a5:50:8b:3f:b6:f1:66:57:a2:f0:14:4b:33:e3:
94:64:b6:ae:39:7d:e9:7e:2d:17:7a:f8:5a:c7:c8:64:f3:d5:
de:7b:61:8a:81:21:d6:f6:c0:01:ad:5c:5b:61:71:8b:73:3a:
6e:85:e9:03:e1:54:04:53:ab:3f:dc:f0:b5:d6:31:5b:97:a2:
4c:a1:d8:91:61:6e:76:03:ff:6c:9a:a0:e3:17:4e:4f:da:fe:
0a:a4:4f:f0:68:7c:48:61:c2:10:c8:14:f7:92:b4:49:f7:d6:
d6:fb:fa:1f:9f:ac:12:fa:6f:e6:16:88:7b:9b:84:96:af:ac:
4a:d5:bb:18:a1:19:01:d4:a1:a8:71:62:8a:6b:42:26:36:07:
cd:b0:8e:ba:d0:08:90:b8:34:22:da:af:ad:6f:07:a7:17:e2:
7f:1c:64:af:44:4b:2a:72:26:4b:23:0f:0b:b7:99:ea:1b:7b:
55:fa:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:14:24 2025 by rpki-client