Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: y2XEHm7Wwk+xnRGEaPSnVJ1xnPNxvkzup3Z6cXNbXL4=
Subject key identifier: F5:B4:C8:E6:7C:AB:E3:13:F6:9D:64:FA:69:C7:45:27:5C:00:63:7B
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 01976E502C9FA2359D6DD4B01F8B08100C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 12:00:37 +0000
Manifest this update: Sat 14 Jun 2025 12:00:37 +0000
Manifest next update: Sun 15 Jun 2025 12:00:37 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: htZ/lJSgvTUmQwhnHTE/ysRrXmod3kRvSYZvFEoLPMA=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:2c:9f:a2:35:9d:6d:d4:b0:1f:8b:08:10:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jun 14 12:00:37 2025 GMT
Not After : Jun 15 12:00:37 2025 GMT
Subject: CN=f5b4c8e67cabe313f69d64fa69c745275c00637b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:f3:f6:96:f9:f7:90:cc:f5:78:04:ac:81:
bc:46:4c:e3:ca:0d:cd:41:7c:b5:bf:6d:6e:c4:08:
2d:de:45:f1:c2:90:a6:7b:bb:6d:9f:b5:7d:56:74:
f9:f9:67:33:a5:c5:5b:f0:86:75:a4:eb:b4:5e:a1:
c2:ac:0e:4c:ce:e7:05:98:52:3c:ba:ff:9e:4e:9d:
1f:71:c7:d4:11:16:19:58:d6:1e:60:a5:6a:2f:1a:
40:c3:98:31:c4:c5:d2:e6:55:3b:8d:b0:6a:1f:42:
b7:9b:4e:c4:8c:57:43:60:3b:8c:8f:f8:34:d6:ad:
c7:8b:83:26:b2:f3:ef:46:fc:17:32:5b:06:fc:eb:
09:7b:e1:3e:af:ed:7e:28:82:b7:59:9d:1f:30:5c:
1b:5c:c8:93:92:ee:1d:f1:83:92:4f:21:fc:0b:fe:
f6:4f:4d:19:6a:f1:c6:94:fc:21:6b:82:37:c0:a3:
63:b6:19:36:e8:9e:3a:40:09:2d:e5:c2:7e:2f:70:
8e:8c:4a:73:d2:02:75:dd:8b:c9:5f:fb:87:d8:0e:
58:31:aa:49:9d:cc:3e:03:bc:e4:62:e5:f6:67:ba:
47:3f:9f:fa:7e:f7:95:ee:1d:2f:a6:2f:36:f0:86:
1c:92:87:4c:3c:f0:da:54:90:3e:81:a8:42:7d:3e:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:C8:E6:7C:AB:E3:13:F6:9D:64:FA:69:C7:45:27:5C:00:63:7B
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e2:88:43:93:1a:30:1a:6f:4b:b3:ad:0e:56:ec:75:4a:db:
ce:98:f4:d9:51:86:a1:38:66:3a:77:95:0a:76:f5:d7:aa:aa:
dc:8a:02:38:5a:38:24:31:6f:81:0d:f8:72:67:f6:b2:1e:a1:
e6:f7:44:28:ad:2d:71:e4:ff:33:18:b5:30:4f:bf:e4:d8:45:
ef:0e:fa:9a:b8:17:7f:89:09:b8:2d:6e:24:3d:a9:67:8f:35:
93:2b:b9:7d:97:df:51:07:1a:2c:0e:0b:2c:3a:10:e8:21:b3:
97:b3:bd:af:74:ae:7a:e2:7e:f1:1a:4c:a3:36:dc:54:5a:c3:
3f:78:10:75:5d:ca:e8:14:49:25:39:e6:37:76:6e:35:93:c9:
68:1e:23:50:1d:fe:eb:b4:b6:b5:fa:d5:4f:c5:d7:ec:0b:8c:
16:a5:0e:44:ac:fd:0b:ea:8e:fe:bd:6e:57:68:18:a4:5c:33:
11:d2:08:91:37:98:47:4b:34:90:2a:32:d1:fa:1d:63:75:13:
36:d9:d5:b1:ab:b1:51:26:c4:fb:8b:1d:87:d9:38:5e:f6:cd:
d7:6b:a7:b4:fc:78:be:51:ac:83:64:36:22:56:0d:c3:fa:02:
7b:71:7c:3f:03:2b:97:a0:1b:46:2b:38:89:2e:75:f3:ce:77:
3f:52:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:32:38 2025 by rpki-client