Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: aD8z5YeKCAnBOd/7KVBJLAd3H/QTm6UbTCl5JeSU0kw=
Subject key identifier: F2:17:CF:54:DB:F5:FA:27:1B:3C:4D:6D:01:E5:FB:7C:8D:03:3E:41
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 019751FD1FD6B05A16DD6C44A99E647D0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 00:00:32 +0000
Manifest this update: Mon 09 Jun 2025 00:00:32 +0000
Manifest next update: Tue 10 Jun 2025 00:00:32 +0000
Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: 41DSAUjF2PQoywuyJhBmdqOigZdNG8oPMW4DY/6SMfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:1f:d6:b0:5a:16:dd:6c:44:a9:9e:64:7d:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Jun 9 00:00:32 2025 GMT
Not After : Jun 10 00:00:32 2025 GMT
Subject: CN=f217cf54dbf5fa271b3c4d6d01e5fb7c8d033e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:99:9f:7f:15:ac:7f:ae:1d:8c:68:42:83:
bb:32:8d:d3:ba:20:c5:64:39:61:aa:08:d0:7c:ba:
e5:7d:3d:51:71:5d:b5:9f:f3:40:6c:f8:b1:72:84:
03:8a:04:ad:ac:99:f5:5c:bf:4f:27:ef:d2:9b:62:
6a:61:a5:2d:a5:9d:46:b3:e5:75:9a:c3:74:a0:14:
fb:98:22:4f:9a:64:9d:a3:1c:74:58:e3:8c:b9:d1:
52:3d:01:07:f9:2e:ac:5c:d3:d3:f1:58:e8:48:49:
bc:ce:ec:20:be:3c:a9:2c:75:0c:17:88:19:11:99:
70:e4:6d:60:9d:06:c2:98:32:6c:a6:5d:49:38:1d:
96:04:7c:fb:77:83:64:67:ab:f8:a1:20:b3:c1:c9:
32:08:f0:f2:89:3e:da:92:9e:1d:d7:ca:94:95:ab:
8d:6a:94:33:db:ca:ca:a7:e0:f7:2f:e0:a1:66:51:
cd:f6:76:65:04:12:de:ef:af:c5:0d:f2:9c:1a:30:
26:85:73:d9:50:27:0e:4b:65:a8:53:50:2b:91:b2:
60:4a:6f:aa:b3:47:b5:bd:41:ac:87:c9:a1:58:a6:
7c:e8:bf:70:f2:c5:64:20:68:e6:e3:2d:a9:2f:14:
87:64:72:2c:0e:89:ac:82:06:2a:1e:86:ff:17:2f:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:CF:54:DB:F5:FA:27:1B:3C:4D:6D:01:E5:FB:7C:8D:03:3E:41
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:e8:d8:fc:3f:77:45:32:c8:f7:fa:40:69:42:7d:f5:30:
ba:98:e3:de:ff:d3:3f:71:19:56:37:1e:14:be:be:06:26:21:
cf:6e:dd:f3:84:b5:70:aa:35:ab:e6:b7:0d:ce:f7:19:48:33:
bc:f5:ca:9b:85:4c:03:4b:d0:7a:c4:90:b4:57:52:24:51:15:
97:6d:ce:d3:a0:2c:e5:d3:d3:24:b1:a5:f1:be:36:8c:04:ee:
73:20:a8:5b:0b:22:13:f1:2d:b4:c2:b4:5b:c2:b5:52:1f:cf:
95:5e:ed:05:d2:4c:c2:72:ab:28:e1:9a:a9:da:03:2f:cd:b4:
e0:3b:1b:93:68:70:3c:cb:2e:0b:7e:30:88:a0:43:51:c6:09:
a1:f5:8d:49:1c:3c:bb:38:2e:57:b1:f6:f1:75:cb:15:12:b4:
9e:20:3d:3b:6f:b8:52:c6:35:c0:3b:dc:e4:61:73:48:e8:28:
c1:83:f5:79:32:13:05:b2:13:26:25:34:7f:2c:d2:e0:7c:48:
47:4a:93:1e:ef:e8:06:0d:ae:2c:a1:bc:5b:4e:a7:54:a3:05:
a3:00:c1:31:43:a8:77:3c:8c:ea:5f:a9:a5:f7:03:0c:d1:e2:
3f:0e:ad:da:e0:10:dd:d0:c9:86:bc:ad:df:85:09:a4:66:66:
e3:b8:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:04:03 2025 by rpki-client