Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: EbDJjmUv7jwuDTSWkTLbXxVfmSizh/uJKTsoff4I+ZI=
Subject key identifier: 13:BC:44:73:E3:FA:2B:B2:82:9E:AC:C1:06:73:95:14:F9:92:3F:95
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 01976D06B84A9248617F73919A3368C4705D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: D7
Signing time: Sat 14 Jun 2025 06:00:46 +0000
Manifest this update: Sat 14 Jun 2025 06:00:46 +0000
Manifest next update: Sun 15 Jun 2025 06:00:46 +0000
Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: yKAUssymnAetnlg1F5WERCbERdFRTxWLtoxORQds6bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b8:4a:92:48:61:7f:73:91:9a:33:68:c4:70:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Jun 14 06:00:46 2025 GMT
Not After : Jun 15 06:00:46 2025 GMT
Subject: CN=13bc4473e3fa2bb2829eacc106739514f9923f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:ef:8a:79:89:c6:90:a3:aa:19:9b:23:97:
ef:49:53:50:31:ec:e7:70:89:f4:bb:8e:3d:b1:41:
40:2e:1d:e5:c2:7f:3d:05:62:d8:39:5a:69:29:0f:
33:0f:ca:51:29:b2:63:c0:4c:69:83:02:08:25:9a:
3a:c3:b7:de:82:04:5d:2f:38:95:27:73:fe:14:58:
0e:6e:95:7e:10:93:89:b4:a9:39:e9:c0:e5:c0:5c:
a1:e9:42:75:3c:70:c3:10:11:bc:c1:50:f2:8a:ce:
85:ba:f4:b5:1a:ef:00:7b:90:2b:6e:69:70:42:b6:
8e:46:e3:16:7b:61:92:e7:7a:70:48:10:67:b1:84:
01:4e:61:4c:a8:61:6d:b9:f5:c2:f0:3a:75:e3:d4:
63:eb:98:52:3f:2e:62:1c:72:68:e6:4f:d8:38:bb:
24:db:84:ad:36:0a:20:8e:41:3e:d4:c5:d3:f7:dc:
09:88:af:b5:18:c2:77:79:4f:90:11:31:8d:c2:e3:
54:c3:ad:db:a1:b9:b3:68:1d:6c:77:13:d4:ef:b9:
a4:e0:1c:77:c7:05:1a:e2:44:77:82:2e:b2:31:ef:
c0:08:33:c4:8d:65:18:4a:5b:38:cc:35:92:4b:48:
8e:2e:16:eb:3e:14:74:57:5f:80:e2:2a:6e:3a:24:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:44:73:E3:FA:2B:B2:82:9E:AC:C1:06:73:95:14:F9:92:3F:95
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cf:d2:ac:c3:e0:2f:62:94:d9:61:cd:60:54:83:9c:f2:5d:
e7:75:54:bb:dc:ce:c8:bd:49:4d:fd:59:8a:c8:d8:5f:0d:b7:
62:90:ec:f7:0a:a2:1c:89:be:64:48:60:24:9f:5b:fb:0e:86:
ef:5e:83:0e:e3:c2:4c:77:08:64:57:24:7e:16:1a:b2:83:0a:
b1:82:f9:64:01:1f:65:bf:95:f5:70:cb:84:30:d1:50:7b:a3:
06:a8:1d:89:df:f2:90:98:5f:12:1a:8f:4a:d0:99:76:12:71:
bf:e7:6e:88:8d:b1:4e:88:65:0c:6d:eb:63:21:f9:75:1a:cb:
cf:3e:e5:8b:93:68:2b:a8:fa:6e:d6:d8:80:59:00:5c:e9:2a:
c8:98:56:0f:5a:0f:f0:bc:cb:cc:f8:cd:b1:8f:99:79:e3:3a:
c7:e0:f8:62:2d:a2:00:24:8a:39:17:e6:d9:32:56:21:bf:64:
25:b0:78:3a:21:b8:68:06:c6:aa:2f:e2:63:4a:c4:e5:a8:a9:
65:43:40:a7:9f:f2:4c:9c:7a:15:04:0e:5c:a9:d3:fc:e5:4f:
c1:de:3e:35:c2:0d:d0:2a:68:09:1c:a3:84:f4:7c:ba:7d:32:
0e:30:d6:5b:bf:50:16:af:2d:ee:4c:55:a6:a7:dd:c5:40:7a:
3a:3e:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:49 2025 by rpki-client