Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: tJJZ2X2CJZQdsMoc/4LKaDH/9D6A5CqA2Hho6iiDQGM=
Subject key identifier: 97:F3:0B:47:33:82:B6:B4:04:73:0B:D2:36:26:83:8E:19:50:FF:F5
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 01975D25BB6AE834A256BC178E006D56C432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 0302
Signing time: Wed 11 Jun 2025 04:00:43 +0000
Manifest this update: Wed 11 Jun 2025 04:00:43 +0000
Manifest next update: Thu 12 Jun 2025 04:00:43 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: ofXH/dAYMGpyOApD8paP4Gudf+rQogZ+geBGtUKr61c=)
2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:bb:6a:e8:34:a2:56:bc:17:8e:00:6d:56:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Jun 11 04:00:43 2025 GMT
Not After : Jun 12 04:00:43 2025 GMT
Subject: CN=97f30b473382b6b404730bd23626838e1950fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:42:74:85:99:15:f8:8c:b4:35:2d:c0:58:
55:b4:87:6e:75:e0:60:09:de:29:25:ff:bb:ff:10:
9c:3a:47:c9:32:6d:11:6f:b6:a6:73:98:51:01:72:
e2:bb:75:f9:8e:99:4a:5e:11:a5:58:a4:eb:9a:6c:
7e:6c:b7:aa:f6:6d:f2:c4:ab:fb:bf:e9:ba:47:ef:
7a:c2:bc:3f:d4:26:73:83:22:28:f6:a0:9e:f4:f8:
aa:e2:ea:3e:47:28:28:e5:c9:2a:3b:85:01:b5:71:
5e:79:4c:1f:49:ca:b4:06:21:41:36:24:82:85:87:
9d:29:ad:fa:ef:9f:fa:5a:07:16:95:1f:4e:5d:a9:
5b:e7:bf:19:38:f9:63:d5:70:f1:1a:bf:ca:14:c6:
09:0c:67:51:bd:63:15:c4:ab:05:1c:b2:cc:cb:d5:
f9:e4:d6:c2:4c:31:e7:4e:44:8e:ef:db:ae:09:82:
52:f6:08:03:83:63:35:04:17:86:79:01:b2:6c:5f:
ea:3f:81:2a:0b:ce:39:8e:a6:f9:ea:e9:6b:14:ee:
f3:d6:f0:17:b4:5f:85:dc:5a:4d:9e:b1:7e:8e:c1:
b1:81:12:1a:3e:bc:5b:9b:d9:a1:bc:b8:fb:be:d8:
f9:59:96:33:05:84:86:5e:c9:1c:4e:3e:6a:8b:51:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:0B:47:33:82:B6:B4:04:73:0B:D2:36:26:83:8E:19:50:FF:F5
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:ff:35:86:40:4a:92:4c:97:f5:f7:9f:50:23:49:90:5b:
44:2b:3f:f2:da:12:da:71:b2:0b:a6:ee:46:5b:6c:8d:77:79:
9a:e2:68:69:74:a7:44:2d:2b:ae:fb:bc:a8:21:dd:d1:ef:d3:
08:da:04:73:9f:1c:26:08:9e:cc:41:55:58:57:54:7d:fb:9a:
da:10:9e:8d:13:cf:0d:17:9f:61:45:2e:f0:12:98:94:9f:9d:
f2:ec:38:09:d6:7e:31:6c:53:7d:ce:ef:49:88:e9:f5:c7:0a:
15:56:5b:5f:21:61:37:e0:9d:4e:67:8a:ab:d7:01:c4:53:6b:
18:7f:9c:18:0b:96:00:ab:f1:2c:97:7f:00:db:f9:41:4c:02:
b7:eb:d6:f4:7f:35:ba:b6:ae:64:21:f6:5f:b6:33:91:d1:23:
77:17:18:11:1d:dc:f5:74:ce:49:fc:6c:81:e5:22:3e:12:e1:
a6:bc:dc:ff:27:c9:98:a3:f3:d4:57:87:fe:39:49:8a:81:a8:
ba:f4:af:81:bb:23:b6:5a:ac:66:53:f3:5c:ae:e6:48:8b:b2:
e3:76:00:50:b7:7d:72:f2:4a:51:ff:ef:f1:c4:70:f9:83:ef:
da:0d:95:7d:e6:a0:fb:b5:ff:61:97:2f:c6:1b:48:41:e7:71:
97:03:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:39:49 2025 by rpki-client