Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: H2yqoCRnx8aqINTRfOY4pU/YIQaqMG+hF7skaxpH9qs=
Subject key identifier: 66:5C:B6:68:61:6A:EB:DC:6E:E8:4E:EF:E9:B7:C1:D1:61:28:39:76
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019768BBCFA1CCA57903177E4BA9A0F907C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 10:00:28 +0000
Manifest this update: Fri 13 Jun 2025 10:00:28 +0000
Manifest next update: Sat 14 Jun 2025 10:00:28 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: SJ5wlGmQR5hDsgS7+b52ky5XATw3TegeM8BYl7hUcHw=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:cf:a1:cc:a5:79:03:17:7e:4b:a9:a0:f9:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jun 13 10:00:28 2025 GMT
Not After : Jun 14 10:00:28 2025 GMT
Subject: CN=665cb668616aebdc6ee84eefe9b7c1d161283976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:70:b0:cd:46:54:9b:d3:53:e5:5b:fa:3f:
30:76:1a:13:6b:30:8c:0c:94:fa:d8:5e:91:ee:82:
8c:0f:39:a7:02:84:ea:4d:08:e5:83:89:fd:34:a9:
f7:fd:f1:d4:ea:f6:3f:e2:13:6f:29:0e:ea:61:98:
e7:69:ce:8c:07:8d:6e:4e:b2:39:12:8e:94:f0:d6:
78:50:df:82:c3:d4:44:9d:13:83:a4:f2:9b:4f:72:
4b:18:c2:ed:9d:8c:18:cc:c8:1a:a6:4a:fa:99:df:
3e:24:1c:f8:0f:42:23:63:0a:85:27:df:82:77:de:
c6:e7:79:4c:6b:b1:83:da:51:ac:3c:52:9e:ff:35:
2e:ce:fb:ca:8b:08:4a:ed:0c:e6:b9:8e:c2:ef:93:
88:1b:1a:fe:1a:a9:64:31:4b:7a:c3:69:35:7f:1a:
a4:8d:d7:13:8e:f9:b4:2e:52:c4:41:9f:d7:96:ff:
65:03:a4:a9:ba:65:86:23:18:33:5b:14:d8:88:e7:
92:76:b4:d6:5a:13:66:ec:f6:11:ba:16:66:35:bf:
c5:de:7d:32:cf:23:9d:ad:3d:4e:b7:a1:68:da:a4:
4e:fe:1c:5c:d9:74:87:af:38:75:64:cf:71:45:d4:
f6:a8:7d:70:b2:04:4c:01:cd:03:80:75:86:ca:d6:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:B6:68:61:6A:EB:DC:6E:E8:4E:EF:E9:B7:C1:D1:61:28:39:76
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:07:be:5f:34:01:8f:7f:2b:e4:8e:65:28:e7:bb:d6:bf:1d:
2f:3a:81:db:eb:21:54:7f:6d:50:3e:05:d0:4f:fa:43:4e:e5:
9a:2b:89:4b:ba:15:ab:e4:c2:a7:c8:e2:33:dd:81:6b:28:b8:
4a:bb:24:9f:ed:19:eb:07:a3:a6:52:4a:cb:0e:ca:d5:9f:45:
d5:13:e6:56:84:f2:0d:ce:7d:94:43:fb:65:f2:4f:4f:fd:5f:
8a:cd:4c:e3:b0:a9:5f:a4:25:a9:d5:a2:6b:cb:75:cf:29:f2:
b1:ed:09:19:40:e4:30:bd:ce:6d:90:f0:45:4c:70:48:55:98:
bc:3b:3c:c3:b4:87:f0:d7:72:04:f6:c1:91:37:9b:22:07:f7:
98:07:8e:07:c0:c8:eb:0f:05:d7:ee:10:86:b4:2b:65:f3:9c:
1f:e5:c2:4e:20:d3:fb:a0:4f:92:8b:70:88:76:28:9e:c7:57:
20:e8:ce:ef:08:6f:41:07:e0:d7:a3:16:11:b8:af:07:0d:ea:
1e:9a:97:14:7b:6f:af:21:e5:a8:ce:e3:44:17:f5:ce:b9:7c:
e6:31:e0:a1:0c:c4:07:79:74:65:d1:be:14:f0:45:78:e3:1b:
ce:73:85:5d:87:a0:13:fd:fc:c7:e3:fb:60:28:de:d2:c1:26:
00:d7:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:46 2025 by rpki-client