Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: Vp41rfcxhMlbgU+0LdZjfSNZ+GcIu8gz2atCngH8i6Q=
Subject key identifier: 78:B0:2A:E2:8B:A0:BD:83:EA:8B:81:9E:71:10:6A:59:BE:D7:2C:14
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 01976C2B5C8F07D274E63C6246D7962FD972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 7A
Signing time: Sat 14 Jun 2025 02:01:10 +0000
Manifest this update: Sat 14 Jun 2025 02:01:10 +0000
Manifest next update: Sun 15 Jun 2025 02:01:10 +0000
Files and hashes: 1: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
2: aMamdndYtr-LSiqK7cchtPfo7eU.roa (hash: Hs3iCB4UcAm7In94RqaEzXt+QqhFNiOgYMCF6LTA37A=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: mN0bEA/F9A6BIy98OR9JJArkerUEYf4WDDEzdcUq6NM=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:5c:8f:07:d2:74:e6:3c:62:46:d7:96:2f:d9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Jun 14 02:01:10 2025 GMT
Not After : Jun 15 02:01:10 2025 GMT
Subject: CN=78b02ae28ba0bd83ea8b819e71106a59bed72c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:e7:7d:70:43:09:16:ea:2d:82:29:35:85:
94:f3:e6:c3:1b:ea:1b:1c:bd:e3:0c:8f:c7:39:17:
55:e7:d7:0e:1d:0f:70:0d:1a:1f:d4:cb:6b:51:bd:
ce:f3:28:d3:d4:ae:bf:45:93:16:aa:e5:18:14:f0:
f2:de:83:d6:43:ef:86:f2:8c:d6:2b:47:b6:53:d6:
a0:ad:71:76:05:79:92:40:74:e1:c6:be:17:65:5a:
12:a9:1f:fe:80:45:74:91:fc:47:ee:51:46:e8:19:
7d:16:f2:7a:1f:7b:91:bc:f5:fd:85:85:f6:af:ea:
ef:dd:c9:25:78:2e:9e:d1:90:6a:6f:1f:62:77:69:
45:58:1a:98:54:f8:e8:5b:e3:34:f6:a8:8c:dc:bc:
4c:80:8e:e6:21:7f:40:64:94:7c:fc:1e:85:6c:fc:
f5:51:7a:9a:21:88:b3:8c:38:36:de:34:13:0a:0f:
bf:70:d7:c7:c2:41:0f:8b:46:a1:c0:13:32:d9:d7:
55:99:c0:5a:e0:6c:29:80:d2:ef:3e:14:8d:95:e6:
a9:22:94:10:32:ad:26:8b:5a:58:5b:7b:8f:bf:cb:
4d:76:52:aa:7a:f4:38:d7:f7:29:0e:c6:ff:1c:02:
4c:ad:23:eb:35:af:27:e6:06:42:6e:f9:a0:42:c1:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:2A:E2:8B:A0:BD:83:EA:8B:81:9E:71:10:6A:59:BE:D7:2C:14
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:32:32:4f:0c:e3:22:62:d8:72:9f:57:0d:3c:23:fd:34:
78:34:69:64:4b:11:4b:46:70:9f:fd:d9:bc:6a:81:0d:71:04:
ac:7a:59:df:5a:68:ac:02:eb:ce:a1:f2:2b:30:f0:f2:d5:f7:
80:df:e9:e3:ba:45:63:63:a0:bd:79:b6:95:ef:65:25:cc:a3:
06:91:38:99:7c:c4:60:8f:2c:ed:bb:8b:6f:6a:34:3f:97:33:
7f:c1:c7:37:6c:8d:89:21:db:11:50:b7:cd:ff:b3:ee:46:c6:
ae:5e:9b:40:27:38:56:5e:01:71:ca:65:94:38:4e:4c:17:ad:
ea:cd:9d:63:ad:ff:00:65:28:75:04:19:e4:a9:a8:67:f2:87:
1c:44:be:ba:83:7b:27:94:00:8c:01:db:20:48:c9:bf:35:2f:
4c:94:46:24:3f:c3:00:1d:64:fe:ce:bb:b6:57:f7:04:dd:0b:
80:c9:0d:ec:da:2b:33:fa:b7:20:6f:5a:b3:b8:a7:b0:77:70:
df:76:ec:5f:fa:e5:8e:5a:52:01:55:4e:9e:7b:95:a9:6f:43:
a3:bf:c2:93:52:3e:d7:6a:62:b5:a7:51:53:7d:8e:8b:59:a8:
1f:65:d5:bd:56:fd:e4:22:b4:43:11:9d:0e:d3:52:89:ac:c3:
33:cc:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:30 2025 by rpki-client