Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: YCGBS5fyKWRZ0qEc+TguTqH4jxlsHITHAiw0NxKUBnI=
Subject key identifier: 55:59:06:A4:31:02:81:02:93:54:17:D7:0F:60:E7:B7:91:2A:1D:04
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019849D34F3714934334A48D8EE5D23C4916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:41 +0000
Manifest this update: Sun 27 Jul 2025 03:00:41 +0000
Manifest next update: Mon 28 Jul 2025 03:00:41 +0000
Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: hzqIuuoBlGTa3tj5GZsZT2ged2rNd9tjmuq4RkMKvrY=)
2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4f:37:14:93:43:34:a4:8d:8e:e5:d2:3c:49:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Jul 27 03:00:41 2025 GMT
Not After : Jul 28 03:00:41 2025 GMT
Subject: CN=555906a431028102935417d70f60e7b7912a1d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:3d:cb:11:e3:fc:f5:d1:1e:81:af:6a:97:
04:49:2e:3d:68:60:48:ec:f0:23:04:0f:fe:22:67:
a6:a1:e9:b0:e2:c6:02:d1:15:a5:0b:3b:fc:48:e7:
6c:91:05:bd:19:94:4d:f8:f7:34:3b:4a:b0:c3:59:
15:8e:9d:0b:72:4a:a9:bc:c3:de:93:57:9a:ca:62:
35:e9:97:f2:53:84:75:5d:67:13:93:be:e9:42:60:
bc:78:4a:5e:85:eb:8a:b3:95:10:05:18:59:bf:33:
02:3d:f7:de:c4:23:c1:28:bd:ed:76:3c:f6:8a:f7:
c1:08:e8:7c:25:4f:e8:65:02:96:25:40:ac:e9:d6:
94:6a:62:30:f0:e6:3f:59:47:f8:8d:dd:b7:0e:0f:
64:02:ba:6f:6b:cf:22:68:d5:8b:f0:b7:b2:03:0b:
89:d2:2c:c9:81:2c:a0:2f:7a:2b:8f:96:a1:94:c3:
83:13:87:a1:ec:f9:af:09:96:2e:33:33:71:78:4a:
29:4f:28:9d:88:64:a2:8e:5f:a1:8f:04:85:fd:4a:
b2:02:ed:0b:fe:bf:98:f5:de:bc:f2:c0:04:fa:05:
42:94:97:3a:2a:61:c7:e8:f8:07:3d:41:a9:8f:9c:
4a:7a:3a:bb:25:20:f6:d5:4c:cb:f6:45:10:c7:c4:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:06:A4:31:02:81:02:93:54:17:D7:0F:60:E7:B7:91:2A:1D:04
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8f:72:16:ed:60:f4:12:24:cd:a7:6d:6e:0c:8c:41:28:dc:
87:28:70:a1:30:bb:4c:5f:0b:2a:d8:1f:ac:2e:6c:e3:9e:05:
dd:f8:bc:45:29:f6:ba:48:83:4d:82:07:a6:c4:45:96:ec:1d:
b3:c2:c6:30:11:5c:b0:20:2e:b4:58:8f:2b:d9:a7:d9:76:75:
08:5a:9d:90:c5:02:a2:bf:68:89:78:9e:88:21:1b:32:0f:e4:
46:dd:58:3e:0a:45:c4:f4:40:22:1f:75:3b:bf:52:49:ab:73:
c7:c4:38:75:ee:ad:75:80:c3:14:55:7c:b7:98:ac:1d:1a:cc:
9c:cf:16:0b:be:28:a3:0f:7f:33:c1:0f:ed:fb:77:08:ec:9d:
ef:2f:98:cd:10:f4:d7:95:75:f5:b2:b9:5a:4d:80:11:90:2b:
c1:9f:13:78:f5:47:3b:62:c9:f5:50:40:70:77:86:f4:d5:8f:
4e:f1:24:da:5a:84:18:2f:a3:e2:e5:d4:9f:5a:3c:07:15:43:
0c:52:12:2d:68:23:4a:1a:ce:98:97:70:7d:f1:f1:79:70:49:
2d:db:0c:7f:88:00:d1:25:5c:49:1a:a8:6f:5b:d4:6c:19:02:
49:53:09:0b:7f:20:1f:be:d8:cb:84:74:63:02:78:48:15:f6:
9a:34:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:53 2025 by rpki-client