Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: LlBLH6niQjMdONdcM8XAbyJNabgk9WpVk4XE4wsolms=
Subject key identifier: 6A:67:61:5C:99:8E:F1:2B:50:3E:35:DF:88:7C:0C:10:71:CB:3E:9C
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 01976C2B4DFF3E48A7720AB5D706E2F58794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 15AE
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: ZobwuQJlyfTBHn_a7YG93r8zB-c.roa (hash: OuGiwc5e7Uh2SsaOmHGGMAe9pQSfXZsNsX2xOuLeEXY=)
3: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: /rnuyxwZh/QT42NYqc8kW3bQOVAIiaFHfoe0jLNCMgg=)
4: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4d:ff:3e:48:a7:72:0a:b5:d7:06:e2:f5:87:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=6a67615c998ef12b503e35df887c0c1071cb3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:ec:34:a6:ff:ad:50:e6:9e:55:69:3c:df:
8d:dd:74:d8:89:d6:95:cf:b5:a1:69:c0:6a:1d:9a:
b5:68:25:60:e1:9e:72:69:5e:c7:fc:e1:b3:7c:ce:
16:b6:17:46:06:9e:d5:c9:60:d9:cd:a5:81:c1:d5:
8f:52:cb:de:7e:40:44:9a:cb:57:6c:61:83:87:7f:
2b:94:82:62:47:61:46:be:68:73:1f:ea:43:a2:5b:
6c:8b:19:e0:de:5f:e1:80:a5:d2:a9:7c:b1:2c:f5:
34:75:33:1b:83:13:e1:47:a9:ac:02:0f:91:0e:23:
d2:00:e3:10:05:5b:c4:53:c1:2b:bc:05:36:20:8d:
30:33:92:c9:b3:da:3d:0f:4f:b6:82:eb:26:6d:1b:
88:35:8a:1a:00:5f:c9:90:87:f1:d4:3e:9c:28:7d:
55:55:b9:23:74:f1:10:16:3c:8d:f6:eb:d8:19:b2:
b9:13:ad:5c:2f:b2:bb:84:2b:47:cb:07:a4:3b:b3:
14:01:80:d6:28:31:f1:e1:f4:e4:4d:d6:f3:0e:c5:
99:65:0a:71:fe:3e:ab:a0:4c:b2:24:98:33:42:0b:
78:e3:9c:20:ed:a6:1d:6e:75:3d:c4:c4:cf:3a:df:
69:fc:c4:84:38:7b:6a:67:03:93:d6:25:be:bb:7c:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:61:5C:99:8E:F1:2B:50:3E:35:DF:88:7C:0C:10:71:CB:3E:9C
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:24:c8:76:e9:56:96:5a:ae:26:7b:c4:17:8e:39:3e:55:
c2:f4:0b:28:d1:c3:6d:05:95:49:89:2e:a0:ad:2e:21:34:11:
df:b2:6f:e6:3e:32:22:56:c1:67:fc:94:6e:45:f6:9a:3a:ef:
8e:ff:f3:a3:db:5c:3c:98:10:ed:2d:6a:cc:fd:28:df:c7:9b:
48:58:42:a7:81:06:40:36:7a:a0:7b:35:88:bf:f2:58:fe:63:
a6:03:c8:87:d4:9a:ee:b9:10:be:21:00:ad:40:f1:df:90:7d:
d3:22:47:ef:3b:a8:f4:49:3a:51:6c:a3:0c:cd:66:b0:3c:9a:
cd:25:2d:26:e2:06:3a:6c:c7:eb:02:a5:3b:76:bc:94:82:a8:
37:53:87:b1:9d:c7:0a:15:a6:be:df:33:ca:85:ea:e8:dc:ab:
40:5e:16:5c:bc:30:5c:79:85:7d:d5:f2:8e:45:8b:73:55:60:
96:f2:3d:f6:31:8a:92:1f:79:0e:81:c6:15:c6:a2:db:31:2a:
e5:c0:65:b5:f9:f1:b1:c0:38:11:1d:c0:1e:4e:c5:e0:d3:7c:
91:14:09:1d:ba:85:dc:47:55:94:99:61:a4:a5:f3:f9:34:bc:
dd:02:59:ef:ff:60:3d:b1:d7:7f:55:71:0f:13:a1:ee:37:a9:
ad:ea:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:49 2025 by rpki-client