Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: LDpzzTQPMyam4LclKiQehy/cpIak/EXB0TGzFCSOzIk=
Subject key identifier: CD:9F:E8:A7:81:65:5E:A8:CD:B9:24:3D:CA:3D:CD:C2:C1:65:8F:51
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019776E5B087491A451CD74826B743301940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 04:00:53 +0000
Manifest this update: Mon 16 Jun 2025 04:00:53 +0000
Manifest next update: Tue 17 Jun 2025 04:00:53 +0000
Files and hashes: 1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: P2vXGQpzwgQQaRDwya3Ml4tNx2Mmgl03A5TLJ28LFyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:b0:87:49:1a:45:1c:d7:48:26:b7:43:30:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jun 16 04:00:53 2025 GMT
Not After : Jun 17 04:00:53 2025 GMT
Subject: CN=cd9fe8a781655ea8cdb9243dca3dcdc2c1658f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:69:01:c4:5a:bc:9d:07:e2:ac:c4:77:cd:
06:08:7b:ac:e8:ee:e7:6b:ca:90:8f:e5:41:f8:73:
0d:6e:50:57:3f:35:9a:de:b7:4d:0c:ae:d0:f3:25:
02:c3:b3:b7:99:73:e8:72:70:e6:2f:d1:bc:07:68:
17:1e:96:23:db:13:e2:66:9b:e9:b7:eb:28:d0:4d:
df:a6:a0:51:5d:dd:d9:73:fd:0a:b9:14:9e:4b:1b:
3c:21:ea:d3:7b:b9:56:30:95:06:1b:6e:be:45:08:
1c:b0:f2:00:e2:c7:fa:47:65:be:2e:7a:fb:b5:89:
d0:8a:e6:61:52:33:35:c9:ec:e7:50:b7:6b:e3:9c:
c1:6d:7a:92:27:45:14:4a:ce:cc:99:e2:7d:b1:88:
51:e9:8c:88:a4:5b:ab:71:3e:37:25:27:89:88:e9:
03:9e:5d:c5:cd:14:56:83:84:f8:d5:ef:a9:80:6a:
37:00:6c:97:55:70:1b:6a:c5:46:9f:57:17:d6:3d:
25:14:0a:a7:63:6e:5f:71:09:d9:c5:f2:ce:44:80:
2f:7e:21:c6:cf:90:d5:9c:f7:e2:73:71:03:67:02:
e8:bf:84:c8:49:76:d5:b3:16:e8:e2:2c:c5:b4:90:
a2:9c:84:5e:34:0e:40:e8:1d:c7:64:37:ad:31:fa:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:E8:A7:81:65:5E:A8:CD:B9:24:3D:CA:3D:CD:C2:C1:65:8F:51
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:8d:18:0c:26:75:ac:3d:09:31:98:c7:af:dd:55:3b:e3:
84:35:a6:53:4d:e9:f6:fc:98:47:d2:b0:35:2b:8a:24:a6:f9:
55:34:c7:b8:04:23:01:52:25:0a:f8:ca:ff:4d:2e:ab:54:3a:
ca:95:45:a5:d3:68:20:29:2f:43:7b:c7:ed:82:ed:7c:dc:3b:
fb:55:1a:34:d2:52:37:6f:c6:f6:d5:2e:e0:60:6b:ad:a7:1f:
e6:ab:47:cf:a7:9c:d4:86:ce:0c:2f:67:65:07:e5:05:84:c5:
5e:7b:fc:98:1e:1c:36:2d:a5:c3:35:90:b5:ee:0c:22:c1:b6:
18:e2:3a:b8:4f:e3:2e:f2:1d:6d:0c:81:8f:3a:0d:2e:c2:ab:
ad:ab:cd:73:d7:ac:03:fb:96:16:8f:95:c6:f4:7e:bf:bc:19:
7a:6c:d9:bb:d3:fd:44:c7:45:7c:5b:84:1c:76:5a:01:2c:c4:
5a:36:fb:11:12:fa:c4:66:91:3d:93:e0:db:64:89:b2:51:02:
68:58:2e:2a:7e:d5:3e:4a:72:17:7e:e4:1a:c1:05:c4:3e:36:
0f:3f:46:6b:5e:b7:9f:52:4c:13:a7:5f:05:1e:47:7d:f8:12:
b6:16:31:14:24:0b:28:f9:4c:02:7b:28:73:05:14:06:d4:7f:
63:6b:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:57:14 2025 by rpki-client