
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: x/fCLv5v6vBwMwCWflzGXQozXG4wr2I4iWc85e8k6yM=
Subject key identifier: 4D:C2:2F:43:0C:D1:EC:70:63:B6:16:74:47:2F:15:60:B5:29:5D:8B
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 01974B56653D19D26166D0D960128F8D2430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 17:00:42 +0000
Manifest this update: Sat 07 Jun 2025 17:00:42 +0000
Manifest next update: Sun 08 Jun 2025 17:00:42 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: MQnCwLi0qtAsDVxxH6zSQQbezy1ICb/3LWPMYtg0Src=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:65:3d:19:d2:61:66:d0:d9:60:12:8f:8d:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Jun 7 17:00:42 2025 GMT
Not After : Jun 8 17:00:42 2025 GMT
Subject: CN=4dc22f430cd1ec7063b61674472f1560b5295d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:16:d8:63:b6:51:85:b7:7f:3c:48:b9:80:
d5:ba:a7:5f:4d:ec:88:eb:a4:62:15:0a:72:dc:70:
b6:da:05:3f:c3:82:a8:22:d6:cb:2f:b0:57:fa:b2:
8c:1c:34:db:f3:f4:b9:77:d8:70:f9:ec:f3:2f:94:
07:ab:aa:ad:7e:df:60:d0:4a:ba:fe:47:7b:ca:27:
b1:6f:4b:b8:fa:72:40:72:f5:7f:98:73:89:a4:7a:
6f:3a:55:0a:c8:05:0b:f2:c2:c5:9f:de:4a:49:d7:
de:60:2c:1d:e0:47:c3:fe:54:20:f6:73:0b:a7:30:
77:38:0f:c7:69:ff:f1:4b:04:66:1c:13:ee:fb:bd:
25:53:57:9c:9b:63:b5:56:35:ec:84:67:42:7d:e8:
62:81:69:be:2c:53:9a:70:0c:4a:26:e7:8e:8d:15:
ce:28:e4:91:2e:4c:52:f0:e8:fb:07:6e:c1:55:a1:
69:d1:45:1e:f2:ff:02:14:48:e5:36:58:2e:71:4f:
7d:b0:2f:d4:5a:12:36:f2:5f:97:7d:f5:46:7b:d1:
df:27:58:a0:6c:0f:94:f3:03:ee:9a:60:98:ea:0f:
3b:1b:5f:05:51:26:a7:1d:43:c3:9a:bb:c2:8e:b6:
b1:5d:42:ff:66:da:a7:3d:a4:32:35:3d:23:37:7c:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:2F:43:0C:D1:EC:70:63:B6:16:74:47:2F:15:60:B5:29:5D:8B
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:6b:00:07:4c:87:73:7b:1f:69:d2:be:c0:a9:b1:2d:2d:
2e:62:b8:0c:4d:60:e4:7c:77:d7:6a:9d:74:4a:db:41:66:e0:
61:20:fd:4d:8f:16:3a:45:9f:73:0f:d0:c1:38:07:bb:3b:96:
dc:1a:5f:6e:95:9a:a1:85:89:98:1f:b9:2f:2a:c6:52:a1:5f:
a0:ad:ac:52:2e:f1:7a:f2:4d:d6:b0:54:90:51:e7:18:54:3f:
10:c4:ed:91:79:7f:1b:a3:82:45:89:20:9f:04:d0:76:bb:d1:
7a:d0:5a:1b:4b:7c:4c:8b:d6:4e:d2:60:04:02:3a:a5:aa:3e:
f7:88:65:31:2a:ad:06:54:c6:55:e9:af:c3:25:f6:f8:4d:ee:
27:cd:34:3d:6c:74:48:9d:04:75:3e:aa:ea:67:80:a9:7d:15:
b5:c8:34:cb:22:39:88:ff:a5:cd:cf:b3:27:41:c8:1a:69:28:
2f:96:83:c9:88:ce:cb:bb:0e:de:aa:62:a5:cf:c0:f0:ea:b6:
b1:de:18:71:c5:1d:c4:e7:5a:50:31:23:fc:0e:e6:43:95:16:
b0:8c:91:da:5b:18:2e:ab:e1:34:5f:f4:de:50:d6:de:55:f6:
16:f6:8a:7a:60:70:bb:bc:a7:8e:d0:83:8c:c7:d9:de:ff:cf:
73:2c:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:33:30 2025 by rpki-client