Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: TDEM8up+pxpXrlRkNpa3JGDRtMAdpQrzLup6hkbY4jk=
Subject key identifier: 2F:75:8C:B0:38:8D:8D:F0:BA:E6:63:CF:D6:FF:63:95:CC:0F:5E:ED
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 01976960F37030FF55FE85ED4012B5206D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 12C8
Signing time: Fri 13 Jun 2025 13:00:50 +0000
Manifest this update: Fri 13 Jun 2025 13:00:50 +0000
Manifest next update: Sat 14 Jun 2025 13:00:50 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: 0vyhz5480jW3BBdOmXXPfuhpskl6zGzhvMa4Vf/s7mI=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f3:70:30:ff:55:fe:85:ed:40:12:b5:20:6d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Jun 13 13:00:50 2025 GMT
Not After : Jun 14 13:00:50 2025 GMT
Subject: CN=2f758cb0388d8df0bae663cfd6ff6395cc0f5eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:bd:be:9d:d5:5a:70:98:a0:92:7a:de:69:
ea:7f:de:7b:f8:7e:bf:88:98:76:0a:ca:e7:14:e7:
55:f7:fc:83:d0:0f:1a:ac:fd:dc:00:b9:6d:15:42:
27:d5:cf:a8:dc:d9:f0:d2:58:14:b4:54:bc:34:dc:
bb:e9:9b:19:e7:0a:21:76:d5:c0:3b:d2:c6:6a:57:
97:eb:63:ab:c1:da:e0:bf:69:3f:71:db:25:a4:e8:
91:33:14:1b:c5:99:fd:04:27:6e:80:67:c6:3d:85:
8a:d1:06:8a:0a:7d:d8:e8:95:5c:62:0f:84:73:11:
1f:f2:df:3c:ab:0e:d1:7c:81:e4:62:6b:08:6b:57:
4b:34:a7:e5:5c:47:bf:70:7b:b1:dd:52:c8:6d:77:
3b:4a:67:ea:45:df:41:0f:85:a2:aa:f3:a4:1d:70:
3f:33:21:a3:39:67:3b:1f:36:15:30:de:f8:fc:03:
a7:ea:12:c2:00:00:68:31:47:6a:07:da:ad:34:49:
c9:55:11:e1:3f:db:11:6c:c6:3e:41:ca:ac:c8:80:
0a:1c:26:21:2b:65:fd:af:ab:b9:49:c7:10:9f:38:
64:26:d0:0d:10:5e:46:2f:84:98:c9:9b:c8:35:23:
4a:da:a6:97:5a:2c:f4:5a:72:dd:1d:62:b9:b1:33:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:8C:B0:38:8D:8D:F0:BA:E6:63:CF:D6:FF:63:95:CC:0F:5E:ED
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:3e:69:5b:6d:c8:83:8e:2c:0d:e8:ef:17:56:c9:b9:4e:
c2:93:a8:a1:78:af:e5:25:d1:89:7e:ae:47:43:06:a9:e7:7a:
0f:d1:12:2e:ff:89:ad:da:2a:38:ea:cc:08:f1:31:34:d3:8e:
77:39:08:a5:73:88:7d:e9:f7:1b:1d:ae:19:15:8a:f9:5d:50:
06:67:73:e7:2a:c3:9b:2f:cb:ce:06:fd:2c:90:63:9d:b8:94:
da:ce:ac:80:60:38:ed:f3:7b:35:b1:7c:ad:fb:f0:99:b2:6e:
61:b9:8d:e7:1c:48:64:ce:3c:d3:d3:13:fd:c1:ea:da:50:98:
6e:81:d5:73:50:cc:11:c2:70:09:9f:52:ff:75:8d:30:45:79:
b2:a6:9c:fa:c6:c6:d9:53:b1:52:cb:0e:18:5f:40:cf:fe:b0:
61:49:46:ac:4c:ac:c7:05:ab:cf:00:71:5f:63:1b:ee:4d:f4:
14:a3:52:be:66:ff:f4:57:6e:2f:ec:1a:d0:50:4f:e4:11:ef:
c8:81:91:69:ce:bb:60:5e:a9:00:be:0c:38:71:8f:f8:cc:44:
81:e6:ef:e6:d6:82:4c:5f:51:fe:da:ab:ba:47:cb:d5:e3:ce:
e5:d9:9d:fe:74:f6:a1:3f:17:c5:e0:42:ba:b2:ce:c7:38:11:
66:1a:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:06 2025 by rpki-client