Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: Z8ih1BnRqGPjlqybnkgaYqQZ/oofjedZBo4wGRunRUM=
Subject key identifier: 14:59:C3:01:9A:4E:54:C4:50:D9:6C:F8:A0:76:6D:88:9C:1A:E1:7D
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01976D743A035BA239EAA7895D131E855663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 09CA
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: 1ydcFELxwvpo76drNr+McC8IQET3SuCBbBWPq7vAsPE=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:3a:03:5b:a2:39:ea:a7:89:5d:13:1e:85:56:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=1459c3019a4e54c450d96cf8a0766d889c1ae17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:a4:53:15:3b:de:17:64:29:4c:48:d6:07:
76:3d:7f:67:53:80:a1:66:d0:cb:f4:a1:d5:94:a9:
8d:32:38:aa:3b:65:6c:91:bb:aa:b6:47:72:12:f8:
47:df:a0:31:86:01:88:f5:b9:97:57:b9:ce:69:27:
83:94:ac:76:bb:b4:37:53:26:bb:81:02:2d:2f:9e:
3f:45:92:bf:25:1b:ec:d5:8d:5e:5e:b6:36:c0:4e:
30:f0:9c:b4:a6:58:7b:be:e4:14:53:b6:77:f9:03:
b6:0c:42:f5:64:e4:e5:bc:99:39:ea:1b:1b:60:83:
bb:9d:52:d6:0c:57:c5:92:87:7a:28:a2:57:d0:f1:
a9:48:31:54:39:69:3f:b0:90:ea:d2:6b:12:43:f5:
13:85:39:0c:96:ff:2a:1d:f5:b0:fc:27:5a:5e:ea:
30:2f:cd:99:5a:92:8d:f1:15:b3:71:13:b0:a9:f6:
96:a7:db:e1:78:bd:5a:b9:c8:5e:45:b3:b7:f5:d8:
cb:ed:68:05:14:0c:aa:a1:fd:cd:6f:09:50:33:3f:
31:50:f6:9d:87:10:48:ec:24:8b:2c:cf:8b:73:5f:
14:2e:21:6a:5b:1b:cb:9e:32:9c:22:5f:d2:17:86:
e6:46:a0:41:a4:e8:a9:0f:0f:f7:a4:76:2f:70:c5:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:C3:01:9A:4E:54:C4:50:D9:6C:F8:A0:76:6D:88:9C:1A:E1:7D
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:95:1f:80:31:0c:8e:eb:e7:a4:86:50:75:9f:3a:4a:66:b3:
ec:6d:df:67:56:4f:fe:25:82:8d:b5:fb:85:7a:15:0a:a0:86:
26:64:eb:77:c1:9b:c3:f5:42:bb:ed:1d:f2:51:23:d3:d0:7b:
a8:48:3e:12:8f:e1:dd:15:d8:1c:4e:71:97:41:d8:b4:ed:cb:
2d:a0:38:fc:62:d7:d8:16:0d:00:da:27:32:fb:b5:50:04:5c:
0f:59:76:45:e0:b5:0d:1a:98:4b:55:e1:d7:e9:07:75:5a:48:
54:0f:e8:59:27:66:97:be:cd:c9:c5:31:67:87:a8:11:cd:d1:
d6:03:ad:d8:e3:58:2c:23:9e:9b:1d:52:ce:ba:b7:a2:3c:96:
85:d7:d4:27:ce:61:88:83:65:f5:b7:22:c4:b1:36:55:7e:85:
6e:1a:ca:e3:3b:a3:03:bc:cb:5e:78:3e:ad:98:f3:9d:a6:7b:
78:96:47:05:47:f0:97:0a:22:86:b7:78:f6:2c:c1:50:e0:c5:
6c:5c:a7:5a:0e:85:10:13:2c:9e:e7:7d:eb:c0:f1:12:e6:0e:
8d:75:4e:1e:15:7c:5b:a3:29:46:fc:f1:06:e4:e3:7b:42:76:
65:c0:6a:75:3f:cf:a5:e1:2e:14:10:b0:55:a2:19:f0:c4:ec:
87:33:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:50 2025 by rpki-client