Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: uXqbCyfxkyx8IbKvlnfMv/Pefs4R26XtkMZGWjyU0I4=
Subject key identifier: D8:5C:7E:45:0A:06:7C:31:F5:9E:14:43:36:B1:61:C8:52:F5:AC:C7
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 01976CCF750C38F740137055C4F0B777D1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 053A
Signing time: Sat 14 Jun 2025 05:00:24 +0000
Manifest this update: Sat 14 Jun 2025 05:00:24 +0000
Manifest next update: Sun 15 Jun 2025 05:00:24 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: 1el8ssBuiLgdkIJ4B81djQhJLxgmD9A1ipE7LsvLFlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:75:0c:38:f7:40:13:70:55:c4:f0:b7:77:d1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jun 14 05:00:24 2025 GMT
Not After : Jun 15 05:00:24 2025 GMT
Subject: CN=d85c7e450a067c31f59e144336b161c852f5acc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:5d:b4:2e:72:c7:e0:1b:c6:ec:8c:9d:32:
ff:bf:45:2d:e1:9b:ba:ed:26:9d:ea:30:9f:47:78:
61:d9:1f:b3:0d:03:73:15:3d:0c:d8:76:6d:b2:5b:
c2:95:0d:99:83:e2:8b:3e:5f:4c:ac:01:02:dc:94:
3b:00:ab:cd:ed:11:24:a8:c7:e7:eb:60:d1:51:4c:
e0:55:f5:32:4f:30:bd:bc:78:ed:66:3d:6b:d7:c5:
35:80:ca:2c:2a:04:db:34:f1:4a:13:e6:d5:fa:ea:
ed:da:b7:bf:4b:ae:da:05:ba:ac:6e:9b:5d:de:f1:
d5:5e:69:14:0a:db:6e:00:fb:1a:d2:05:94:ea:b2:
b1:60:f9:5f:b6:e2:fc:c4:cb:91:5e:26:b7:26:0a:
d1:b6:4a:12:de:41:e8:a0:7c:8d:59:7c:df:41:e1:
fb:05:6d:b8:95:82:c8:ec:59:f3:1b:59:52:39:3d:
48:85:b2:27:4c:ff:7a:85:08:e4:89:3f:e7:ae:63:
75:6a:da:6f:5a:31:b1:00:7a:68:ed:20:41:64:15:
a5:98:54:5c:85:fb:7f:3f:55:b7:3e:9d:21:80:c8:
23:7c:09:11:68:47:d3:05:60:b2:bf:c9:ec:53:98:
c8:c5:28:b2:b6:e2:07:55:ba:ae:16:4a:2c:34:43:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:7E:45:0A:06:7C:31:F5:9E:14:43:36:B1:61:C8:52:F5:AC:C7
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d0:10:3c:f5:82:52:22:e1:79:11:b6:9a:9a:e1:35:ae:73:
2a:12:e6:e0:cb:10:d4:b9:8e:f3:8a:d4:26:d6:2c:d2:64:54:
57:d1:34:cf:de:2b:52:6e:cd:94:bf:40:76:4e:c9:3b:1c:1f:
a8:a2:99:51:a0:87:00:96:a8:46:84:10:af:3e:d9:a9:d8:1d:
d1:78:9f:02:ce:1c:25:5d:f5:7b:71:a9:db:e9:5f:69:e6:75:
16:b2:6b:23:a0:ea:d2:54:1c:d4:87:cb:b1:79:ef:bc:b1:65:
05:70:f8:65:1b:d4:cf:c3:9e:ef:32:96:e6:19:4c:12:08:02:
f5:4e:0c:de:cb:6d:ee:3a:a5:0d:37:04:9d:06:cb:16:83:68:
7b:1d:7a:43:14:64:e4:83:bb:d8:16:6d:d8:b2:ce:0e:e8:75:
82:99:de:33:1a:08:e0:b0:a5:21:67:d3:f6:80:d8:f5:63:59:
66:9a:7b:37:9a:6c:5d:e2:7c:66:4f:5f:f8:db:a0:8f:e7:d5:
b5:3b:51:ba:89:51:b3:fc:4d:ec:55:87:48:b5:c9:dc:5f:7c:
37:d8:6e:a2:4d:28:85:04:6a:97:4a:11:f0:a2:9c:44:bb:0a:
0a:7c:c2:fd:4a:2e:9b:6f:be:09:4e:9c:28:c6:e1:b0:a3:d4:
9a:ff:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:15 2025 by rpki-client