Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: W3gtgF155N5F+5JSbSZFob0uoBHH+r6bySKzE0HcDkw=
Subject key identifier: 30:8B:A1:06:03:C8:29:E6:62:FD:D7:4B:98:3A:90:B9:7D:04:B6:AA
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0197789CAAD492BCC0DC8AA6D1836F1919EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 13A1
Signing time: Mon 16 Jun 2025 12:00:22 +0000
Manifest this update: Mon 16 Jun 2025 12:00:22 +0000
Manifest next update: Tue 17 Jun 2025 12:00:22 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: CJKakuLkF39QPcx4loJwuVAjz7UmMHY9M0CAszgbMZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:aa:d4:92:bc:c0:dc:8a:a6:d1:83:6f:19:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jun 16 12:00:22 2025 GMT
Not After : Jun 17 12:00:22 2025 GMT
Subject: CN=308ba10603c829e662fdd74b983a90b97d04b6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:ad:33:cd:b2:01:b3:0c:71:03:a5:92:36:
50:0d:67:59:1b:3c:9a:a0:4d:76:23:4c:78:07:32:
7e:29:28:93:94:32:10:b8:f0:84:ca:6f:8e:16:2d:
1e:f4:d3:3b:41:8f:3b:64:9f:55:f3:6e:73:cb:41:
0b:56:d0:a7:ec:49:09:09:5e:33:20:b6:b0:68:cd:
4d:95:20:5f:6e:a8:ff:2e:f3:ca:d7:bf:42:09:44:
76:ed:f3:89:8f:c9:4e:63:a1:ac:fe:0b:55:cf:2c:
1e:2d:cf:e1:7c:94:b1:95:11:2e:cd:e2:c0:cc:f0:
cd:1f:93:d2:83:68:66:d8:13:ac:7b:08:39:89:d8:
99:39:ce:48:d6:0b:d7:0c:67:38:d1:60:f3:c9:cf:
00:b7:4d:f8:61:04:80:c1:7f:cd:be:6c:ff:ea:36:
9f:e4:cd:e9:33:6b:cb:be:61:1f:98:a8:40:b0:34:
dd:e7:56:df:08:25:2f:94:1d:83:4f:e6:6b:b5:b4:
61:56:ec:7c:03:5f:09:5f:63:9f:1c:5f:05:ec:8b:
a3:bb:39:06:cc:6a:77:35:1b:2d:bc:ea:4a:33:4a:
d7:0d:d5:0a:fb:04:28:2b:64:70:d3:2a:5a:8f:2c:
34:a9:b1:34:06:72:da:80:bf:4b:27:9b:0c:f5:88:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:A1:06:03:C8:29:E6:62:FD:D7:4B:98:3A:90:B9:7D:04:B6:AA
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c0:1b:1d:49:1a:f7:79:67:c0:07:12:ac:ff:df:b7:32:c2:
ca:43:4a:ca:fe:ee:f3:5a:37:71:98:63:f1:f0:1d:c7:88:8f:
42:64:73:43:0f:00:53:88:01:ef:fd:40:a0:54:d3:f9:6f:6a:
1c:c3:1a:28:6e:bc:ac:f1:58:0b:ed:93:dc:4a:ef:5d:4c:df:
ed:0b:86:24:9c:81:bf:2c:ae:aa:6c:c6:07:d9:b7:8e:8d:8c:
07:cb:e3:09:d4:b0:c0:97:42:4d:92:88:97:35:a0:e6:03:44:
07:23:40:f0:1b:d1:75:a0:99:f8:4d:67:29:a5:fe:64:b9:f3:
06:d9:b5:1a:57:51:d8:ef:6e:37:44:7f:c8:b4:c9:f7:d7:95:
d4:51:6c:11:77:9b:67:04:2b:9c:59:27:24:e5:59:12:27:f1:
d5:45:0b:bd:ad:bb:ec:35:1f:c2:39:ec:ab:2f:d0:2d:a9:8e:
6d:68:a0:97:80:c2:75:02:95:ed:d4:5a:fb:fe:b6:5f:ae:b9:
b1:a3:f7:d8:60:b9:02:7d:97:4d:49:af:29:db:1e:30:a0:50:
26:ed:11:cc:d8:dc:50:ad:c4:7e:aa:a7:4a:c0:82:ef:f7:ef:
2d:b7:26:14:4f:72:fe:bc:63:80:6a:a7:a1:4d:f0:e3:0c:7d:
c6:8f:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:18:18 2025 by rpki-client