Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: noi7inanI5DLJVXfkAvUemQhNpwXHGTMZfi/Y/IpBGM=
Subject key identifier: B1:31:0F:07:93:D3:24:EC:1F:FC:FB:72:15:A7:43:D2:9C:8F:84:FF
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019764715678150AE1D01ED70FE64682366D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1014
Signing time: Thu 12 Jun 2025 14:00:38 +0000
Manifest this update: Thu 12 Jun 2025 14:00:38 +0000
Manifest next update: Fri 13 Jun 2025 14:00:38 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: +fNvrGTRPSDmmDS9WabFxsm0qag9U04vYltjTjLZFw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:56:78:15:0a:e1:d0:1e:d7:0f:e6:46:82:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jun 12 14:00:38 2025 GMT
Not After : Jun 13 14:00:38 2025 GMT
Subject: CN=b1310f0793d324ec1ffcfb7215a743d29c8f84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:3c:ec:a6:4b:c0:d3:7b:37:dc:19:88:84:
05:84:8f:c6:64:34:a2:ce:38:e9:16:37:31:5a:cf:
d4:9d:0b:38:d3:ff:85:3c:14:7b:90:69:f2:a9:40:
b8:9a:ee:c5:e4:d5:26:ec:98:f8:2a:f5:e0:c9:9d:
01:77:8c:21:b3:3d:18:b8:38:fa:ad:17:33:66:b4:
2f:e0:c1:75:83:12:86:c3:21:15:f1:8f:ab:b7:87:
a0:44:ab:62:98:90:27:8e:7e:ab:51:cc:f0:5f:b9:
88:30:65:e9:a3:0b:61:e2:88:03:d1:80:eb:7d:e9:
fb:53:51:70:86:d6:ab:2c:de:96:9e:d1:dc:e2:90:
32:9b:9b:d0:5e:5e:fb:ef:bc:fc:df:72:7e:49:67:
08:fa:a0:eb:5d:ba:4a:fb:a1:03:28:23:a7:57:e4:
89:6b:3c:ac:fd:da:2f:61:b5:5a:4c:f2:ca:7d:6b:
c8:b1:dd:0e:7f:89:41:ce:5d:41:59:d2:8f:ec:95:
94:a1:c7:b7:c0:24:2c:94:7f:57:3d:5d:a1:0a:01:
cd:0d:da:4e:b8:74:1f:a4:37:06:c7:45:6e:5a:f8:
96:c1:4c:85:a7:67:f9:d0:2b:3a:c0:c0:3e:ac:be:
62:8d:3b:0c:c0:82:76:de:a4:9e:52:53:b3:70:d1:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:0F:07:93:D3:24:EC:1F:FC:FB:72:15:A7:43:D2:9C:8F:84:FF
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a4:2b:7b:48:44:6c:87:b4:e2:f8:a1:87:21:a2:b8:1e:14:
a0:56:5b:f4:25:3d:40:5b:cc:5a:d5:95:b1:92:e6:d1:ad:13:
1a:02:ea:b8:75:90:2a:30:d0:ab:fd:d8:c8:f1:36:4e:49:56:
7d:4f:23:e7:13:06:f5:d3:a3:22:f7:ae:19:ac:9f:39:fd:c0:
13:58:93:cf:79:be:07:1e:f8:49:2f:b1:89:4f:f9:2c:bb:45:
3e:99:04:de:d8:e4:bc:17:f2:cc:73:6d:c2:2c:22:60:59:d6:
55:e2:ea:82:11:5e:82:54:6d:a5:ad:57:cc:0a:c6:eb:c2:bc:
80:2b:64:d6:f9:45:52:f5:d3:52:40:21:5a:04:29:1a:2d:10:
b8:d5:8e:cd:bd:a1:55:0e:e4:51:13:9a:4c:82:d2:28:c6:46:
0a:f6:59:85:82:50:72:63:26:8d:94:63:90:24:53:75:3a:3e:
e9:8b:27:51:00:ee:33:e6:e9:50:40:ad:b8:bf:a2:33:4f:a2:
4a:86:6b:23:26:88:b4:7c:f6:58:15:ce:65:ec:9d:7b:61:6b:
51:b3:97:37:db:11:63:5c:ee:02:07:6d:c6:d9:10:0c:a0:e9:
a4:34:b7:40:68:d9:45:61:d5:03:a6:4c:d6:20:89:b6:14:3b:
ef:72:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:48:30 2025 by rpki-client