Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: TjvzhySPOHJCJRgRx+L6vKo2JD8AkTkwHuF2a7kLiho=
Subject key identifier: 7E:68:42:4B:0F:C6:66:0D:00:EF:9F:5F:95:F7:E5:87:3E:7D:24:79
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 01977753041527D61E2DFCAE0B62BA6A0F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 06:00:18 +0000
Manifest this update: Mon 16 Jun 2025 06:00:18 +0000
Manifest next update: Tue 17 Jun 2025 06:00:18 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: SHW5tGD32Q9XJlYQ5qb6B+D+qCuKl9Qw4yuR4//cHgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:04:15:27:d6:1e:2d:fc:ae:0b:62:ba:6a:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jun 16 06:00:18 2025 GMT
Not After : Jun 17 06:00:18 2025 GMT
Subject: CN=7e68424b0fc6660d00ef9f5f95f7e5873e7d2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:8d:11:cf:6f:5a:59:be:4f:b7:10:79:ef:
33:e5:ab:b0:da:ef:a0:8c:fd:a5:81:ae:f7:e5:68:
f1:8e:65:8b:9b:74:dd:5f:6f:6f:96:98:48:12:26:
b2:f3:43:d7:3d:e4:de:c3:21:10:2f:0b:0b:d7:03:
34:b3:24:2a:e0:c0:2c:53:72:2b:9d:a6:31:c9:6b:
36:7d:b9:ed:d8:44:b0:ce:fa:99:a6:66:e7:b4:00:
0f:3f:1d:bd:51:0d:52:4d:86:be:14:ec:21:5c:ab:
24:4d:82:95:ee:0b:bb:85:28:d5:2d:50:4d:a9:fb:
6b:4f:4b:37:34:92:44:b8:f0:7f:cf:45:5a:19:2e:
57:c0:7b:f4:8d:a2:93:f7:a0:8a:35:4f:25:b7:4c:
a2:e9:6b:6f:1b:d2:5d:21:4f:53:90:b0:db:c4:59:
fb:85:2e:d9:a3:22:c2:5f:06:39:d0:53:f6:0b:02:
19:1b:62:3b:87:83:08:9e:c9:44:84:94:3a:1f:94:
a2:3f:66:ad:c3:61:3a:3e:f9:5d:d0:1a:f5:5d:0b:
04:4b:bb:66:de:57:0f:2e:1c:16:a1:32:1a:a3:a6:
ce:75:10:db:af:f0:76:9d:8f:ec:f2:2a:98:96:f6:
1f:ed:c6:d2:4d:ea:01:8b:4d:57:2a:01:bf:af:dd:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:42:4B:0F:C6:66:0D:00:EF:9F:5F:95:F7:E5:87:3E:7D:24:79
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:68:be:40:02:e0:65:4c:47:80:69:d2:f3:3a:87:d5:0c:
09:9a:7e:4c:f8:10:1f:a0:cd:ff:9c:b3:d6:ae:8a:e2:df:7a:
11:09:fe:50:18:b4:bd:c6:c6:99:5e:9d:a2:8c:39:b6:80:13:
75:5a:81:7a:55:e1:3c:3e:fd:a3:78:5e:c6:87:a0:21:6f:9b:
2f:da:af:8e:b8:78:bc:f3:79:76:27:2b:af:ba:e3:8d:f4:e4:
59:60:81:ac:a6:3b:65:a1:62:29:c1:2d:1f:23:ba:be:d2:4f:
1e:35:3f:96:f2:bd:f3:08:97:48:b6:b1:4d:44:3f:70:00:8c:
86:a7:8c:be:73:42:0b:75:ff:02:60:4e:38:b8:00:68:2c:66:
62:27:5b:f5:f4:48:f8:18:63:fe:c6:42:4f:c7:22:3f:68:0a:
32:43:bb:72:ac:4a:1b:d6:d4:47:a4:d1:84:73:46:7c:00:b8:
b9:74:09:b0:d7:7a:d4:31:e8:4c:b1:27:5e:56:16:1f:cc:a9:
b6:7f:94:c0:b8:4f:38:52:7a:1c:ec:cb:38:0d:c9:d7:08:75:
ec:00:96:21:6e:1b:d3:a5:ca:ce:6c:f3:11:dc:2b:83:71:0e:
c0:c6:f5:1f:cd:36:ea:a0:16:28:08:ce:62:f6:ca:2a:cd:fe:
7a:05:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:13:11 2025 by rpki-client