Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: 2bz/zudatwTCSqCKSQ6nVRx8B/48MeNWHw8EXWxrPx4=
Subject key identifier: 87:3B:49:4A:BA:B9:20:AD:46:B1:D1:6B:E9:68:94:2E:9E:F5:98:BB
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019758DB20E0C96A644182219C8909FCDA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 100E
Signing time: Tue 10 Jun 2025 08:00:45 +0000
Manifest this update: Tue 10 Jun 2025 08:00:45 +0000
Manifest next update: Wed 11 Jun 2025 08:00:45 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: JCNdBL5VOwgNiGu/ku/zTdQJbNlQynwcRnieRN5x1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:20:e0:c9:6a:64:41:82:21:9c:89:09:fc:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jun 10 08:00:45 2025 GMT
Not After : Jun 11 08:00:45 2025 GMT
Subject: CN=873b494abab920ad46b1d16be968942e9ef598bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:a2:ea:d5:54:6f:44:40:34:92:db:c5:6c:
c2:c1:da:d1:4d:28:73:e5:92:a3:a9:ec:03:b2:d8:
9a:7d:cf:a7:2b:5d:a5:ed:d2:30:44:2a:9a:65:88:
3e:f1:7d:66:19:4b:a1:31:f3:34:5f:c3:93:7b:aa:
72:3a:24:e3:80:68:97:5c:d4:d2:9e:da:ae:cb:f0:
3b:46:20:a2:0f:80:d7:70:f1:d5:16:d9:55:4d:89:
de:cb:ec:e7:94:54:02:b2:02:9f:b5:6f:be:8c:7c:
a6:1c:e6:a8:bb:d1:d8:37:58:24:68:18:aa:57:3e:
93:40:20:de:41:21:6f:be:15:19:0b:00:60:6e:53:
41:70:b9:d9:9c:8b:82:da:2d:70:a4:85:3a:16:29:
9e:7c:dc:35:31:0f:3b:3b:0d:36:46:c0:32:a7:05:
70:dd:49:ac:8d:9c:2d:0e:9c:9f:93:af:20:a5:b9:
2e:a1:7f:e7:d8:34:01:95:f7:bd:fc:3b:16:03:87:
43:92:fc:1d:f9:bc:3f:11:78:41:6f:79:a1:c9:b5:
d1:6a:b3:4d:1d:81:d3:1e:4f:3b:f3:67:7d:14:cd:
13:64:1d:b4:db:47:ad:1a:db:36:ac:5d:42:0d:13:
26:02:73:94:96:fb:cc:22:77:2a:0c:ff:66:52:94:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:49:4A:BA:B9:20:AD:46:B1:D1:6B:E9:68:94:2E:9E:F5:98:BB
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:fa:ce:a0:95:ec:0c:fb:32:ff:b1:df:ad:dc:e1:1d:a5:
3f:da:fb:3a:c7:b4:71:ed:92:7f:53:b5:ec:3e:0b:f5:4f:5e:
61:a8:5a:90:78:50:b9:0a:35:7f:28:9e:4f:c8:2a:36:ce:4a:
5a:f7:72:fa:88:77:cb:2d:93:cd:c5:f7:25:6b:d7:4d:c1:09:
fa:fa:78:42:d0:2b:a5:d8:cb:c9:5e:16:a5:b7:8a:68:a7:fb:
b5:4a:75:d0:3a:c4:10:a8:8a:2c:cb:19:26:74:2d:bc:9c:8a:
56:58:b9:08:5e:11:6e:ce:3f:93:70:89:78:44:7c:ee:03:a4:
53:47:ef:28:b1:c4:a4:da:e9:3a:b3:61:82:3f:ef:4b:39:59:
01:6e:8e:5d:e0:48:2d:1a:2b:09:d3:e8:d9:39:e4:a6:de:4c:
18:ce:82:ae:3e:32:e1:87:59:37:eb:c1:43:da:af:62:f6:dd:
fb:a5:94:85:f4:69:de:7d:6f:c9:e7:f2:d7:3b:27:79:24:04:
56:5d:a6:ea:6c:e6:32:a2:2e:48:8b:6c:9f:4f:41:c4:0d:67:
94:13:a4:5c:c7:9a:84:55:7a:38:64:78:01:df:30:14:71:05:
74:74:0f:c2:bc:41:ca:04:a2:8f:0d:85:2e:01:eb:fa:ae:84:
77:6b:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:21:13 2025 by rpki-client