Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: lbm+E/cOrsq6GZuVPqtYtlRRle/OhNKjJr8OcaDJkQM=
Subject key identifier: 81:EA:50:BE:03:E9:72:58:55:D6:F6:CF:A5:55:89:11:5E:7F:16:BE
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019752A2A57A09A0FC9946FE514D78CEEA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 06C8
Signing time: Mon 09 Jun 2025 03:01:20 +0000
Manifest this update: Mon 09 Jun 2025 03:01:20 +0000
Manifest next update: Tue 10 Jun 2025 03:01:20 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: riOInKNUPxA4dbrDoZ9ygFTZl7kZXIHBTT0aOSMepbw=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:a5:7a:09:a0:fc:99:46:fe:51:4d:78:ce:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Jun 9 03:01:20 2025 GMT
Not After : Jun 10 03:01:20 2025 GMT
Subject: CN=81ea50be03e9725855d6f6cfa55589115e7f16be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:b3:00:72:e4:7a:98:a8:4f:d8:40:b4:7e:
56:be:d7:6d:d9:c5:7e:1a:1b:18:45:ac:bb:99:07:
4f:99:22:8e:a6:e4:43:77:35:33:12:08:4a:4e:1b:
19:91:e4:d0:9b:2a:6f:f4:94:c1:7c:97:fe:81:b7:
17:c7:19:2f:1e:6c:02:3a:21:7d:96:a3:f9:e2:b8:
84:c0:bb:1b:ff:8c:9e:c2:c5:c2:07:07:d8:09:96:
dd:f3:1c:ac:d2:2d:1b:88:e2:f3:bf:0f:43:58:fc:
99:2c:7a:55:41:ec:83:81:29:12:b4:f4:90:34:a2:
2e:40:a1:88:aa:a6:3b:bc:0e:a6:33:56:36:19:86:
f9:2c:1c:03:c7:66:94:16:e1:d5:01:1b:7b:12:7a:
05:43:a8:6f:ea:3e:4a:67:ed:16:39:f1:76:95:55:
29:e2:7d:79:57:bd:d9:cd:b2:6e:10:e6:ed:8f:fd:
73:88:61:63:1f:50:0a:a6:5a:1e:65:9c:19:a1:9a:
20:e2:8a:af:66:2d:45:3f:fa:21:0a:ff:7d:8e:67:
75:1a:1b:eb:f9:9c:f4:5a:90:0c:2f:97:80:c4:93:
31:42:14:ae:29:62:d2:0c:3d:06:67:ba:20:15:b6:
c2:65:27:f5:6e:2e:4e:a2:70:6d:e1:f4:bf:15:80:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:50:BE:03:E9:72:58:55:D6:F6:CF:A5:55:89:11:5E:7F:16:BE
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cb:7a:5f:7a:6d:25:36:a4:f4:64:0d:a7:28:03:35:72:dd:
31:04:54:78:4a:fb:5f:98:9b:a4:c1:d8:86:81:0b:7b:7b:74:
3e:4b:31:2d:e8:5a:9f:0a:79:9c:09:64:53:31:30:c0:db:77:
54:db:ac:fb:9e:76:a2:7f:52:a2:f0:7e:b1:05:39:1e:42:77:
b2:ea:da:42:ad:1c:ce:0c:95:e6:5d:f6:30:c1:e6:54:17:5a:
d3:66:a1:5c:34:56:9f:41:d6:7f:0e:89:af:29:ba:bc:cb:f3:
19:56:28:a5:cd:aa:77:0a:5a:2f:91:fb:04:48:07:a0:3a:68:
63:c4:6e:4c:87:85:0c:f8:1f:ce:19:d6:ed:be:27:5f:a1:09:
a7:39:b7:a7:58:ca:cf:df:61:cc:5c:24:14:55:46:91:79:65:
2b:fb:6d:0c:2a:06:5e:6c:94:34:1c:3d:ae:47:a9:10:44:8c:
91:7e:98:4a:fc:4c:34:8f:86:6d:f6:7e:e6:a0:f2:45:36:07:
b1:7e:92:fc:59:35:96:11:db:08:64:a3:a4:1d:db:db:d9:23:
97:2e:80:b6:a0:9a:43:4f:95:e1:39:65:d5:12:97:18:e5:c7:
ed:73:72:d9:17:5f:eb:0b:2e:de:e6:dc:5a:58:b3:89:95:fc:
32:02:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:13:19 2025 by rpki-client